Static task
static1
Behavioral task
behavioral1
Sample
c6340ae498ea0a5467a6020a4c7e32a8812e6124c283cd81dc47048c51e2649f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6340ae498ea0a5467a6020a4c7e32a8812e6124c283cd81dc47048c51e2649f.exe
Resource
win10v2004-20220901-en
General
-
Target
c6340ae498ea0a5467a6020a4c7e32a8812e6124c283cd81dc47048c51e2649f
-
Size
36KB
-
MD5
119edd43716cce3e648feb656cca6e3d
-
SHA1
de1f3a5fc3bdcfc0cc59cef8f1cb3793d184d6fa
-
SHA256
c6340ae498ea0a5467a6020a4c7e32a8812e6124c283cd81dc47048c51e2649f
-
SHA512
43bb74d2eec31e271d9c7d21b6b6ba0ef65bffcfc7bcc1c8e84d6906be283512bef08147a0c9446e5a95f8bf22de77fd3a0aea41b4ac3e7cb31016db4b93f27f
-
SSDEEP
768:hftbB3kf5MTr98JLGTz6MLbDLpFKrYut+mbfr:bbNe5qDq
Malware Config
Signatures
Files
-
c6340ae498ea0a5467a6020a4c7e32a8812e6124c283cd81dc47048c51e2649f.exe windows x86
865f68e61bb0025d7c163caa73e1741c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord645
ord571
ord685
ord100
ord616
ord617
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ