Static task
static1
Behavioral task
behavioral1
Sample
d129ba4b470dd115134d706afb0c2d76bab512423e8100ae37d942b2debcb7ec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d129ba4b470dd115134d706afb0c2d76bab512423e8100ae37d942b2debcb7ec.exe
Resource
win10v2004-20221111-en
General
-
Target
d129ba4b470dd115134d706afb0c2d76bab512423e8100ae37d942b2debcb7ec
-
Size
828KB
-
MD5
dc6bf60a2bb2eb3793b512958e13a464
-
SHA1
3a01991bf51cea967eaced65435bd6eaf54d591c
-
SHA256
d129ba4b470dd115134d706afb0c2d76bab512423e8100ae37d942b2debcb7ec
-
SHA512
d548d24c007b02d79e6ff4027deebdd1b430e10b8a0e93c344f27748c0c66145ee30abef7d86a2ea6df7117bb74c957672a72ffb7fc015b684b605e5a471fcd4
-
SSDEEP
6144:MhvDbVdRQ/vqkg1gEagdQHR/XL1jQOZVdRQ/vqkg1gEagd3:gnV7uikFg8jZV7uikFgZ
Malware Config
Signatures
Files
-
d129ba4b470dd115134d706afb0c2d76bab512423e8100ae37d942b2debcb7ec.exe windows x86
74f655c841a2ad90aa9834eed25a8075
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord665
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord681
ord685
ord100
ord616
Sections
.text Size: 592KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Cyou Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE