Static task
static1
Behavioral task
behavioral1
Sample
f36279ee2f3e4498d4ba6321a95a9b40e285cea6e14d8da151ac70a1483b594b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f36279ee2f3e4498d4ba6321a95a9b40e285cea6e14d8da151ac70a1483b594b.exe
Resource
win10v2004-20221111-en
General
-
Target
f36279ee2f3e4498d4ba6321a95a9b40e285cea6e14d8da151ac70a1483b594b
-
Size
36KB
-
MD5
5cbb9487e81809d4031dc6a1211b4465
-
SHA1
ef793141188c2bdf2831d3f2f99c10391f058b37
-
SHA256
f36279ee2f3e4498d4ba6321a95a9b40e285cea6e14d8da151ac70a1483b594b
-
SHA512
3a3e1a3dab29ba89bbb9a5a684a8e09dc332f6d2b4f44cd7e870ea176c349cb98345f5744ac14d612ceabf1117426da21a90bb1d15406fd473e3a9cf4c44dd54
-
SSDEEP
768:DhVV32duRV15Mq+VI2NGV1z6CG+JpVDoFKrYutw6XRu:DF2dLaCa9GgO
Malware Config
Signatures
Files
-
f36279ee2f3e4498d4ba6321a95a9b40e285cea6e14d8da151ac70a1483b594b.exe windows x86
282f3cbfca25d30054c8d2d7feb06967
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord645
ord571
ord685
ord100
ord617
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ