Static task
static1
Behavioral task
behavioral1
Sample
db3259f12a324dc6c3e1520fb56d211aa8dc983c11aea21e4460fedc6e8388d6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db3259f12a324dc6c3e1520fb56d211aa8dc983c11aea21e4460fedc6e8388d6.exe
Resource
win10v2004-20220812-en
General
-
Target
db3259f12a324dc6c3e1520fb56d211aa8dc983c11aea21e4460fedc6e8388d6
-
Size
248KB
-
MD5
e2470c15f3660920bb10907a8084cc8a
-
SHA1
f7c5251e9f0c576549eab248a9bd8ad502f5f28e
-
SHA256
db3259f12a324dc6c3e1520fb56d211aa8dc983c11aea21e4460fedc6e8388d6
-
SHA512
75ade596aad3d15e52125592c94cf26faafbe09e7423d631ab140beec9990d79be1173c8f5a1c362a2496a092d0f5fac8991994ae070af9835821d80fbaed317
-
SSDEEP
3072:ttn5ymi8Eu11uZaLJbN2SQ3N7Do0JgT5SVtoaKGlD8yWC242UcdRCU4J4lg4E4tB:
Malware Config
Signatures
Files
-
db3259f12a324dc6c3e1520fb56d211aa8dc983c11aea21e4460fedc6e8388d6.exe windows x86
e97ba881ba79f930f9e1a07a9e65ee97
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
Zombie_AddRef
ord100
ord616
Sections
.text Size: 240KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ