Static task
static1
Behavioral task
behavioral1
Sample
ef396871e73bab9c7147bc74a76433a73905e427a32908f6e0b7b810f03cf157.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef396871e73bab9c7147bc74a76433a73905e427a32908f6e0b7b810f03cf157.exe
Resource
win10v2004-20220901-en
General
-
Target
ef396871e73bab9c7147bc74a76433a73905e427a32908f6e0b7b810f03cf157
-
Size
248KB
-
MD5
ffb43664a82ba7d4ea179b5a628d6efb
-
SHA1
a10db1a901ab93407e4a84575f246febe9f4bdf1
-
SHA256
ef396871e73bab9c7147bc74a76433a73905e427a32908f6e0b7b810f03cf157
-
SHA512
71ca8ab21ad708a2f0a192e520c0a94341251deefccfd258cb7f4f30c22c9f3f7ff2332e0ed0040c196c6b7752aaaaa885bca1ed5c6fa0271877de73b96ee504
-
SSDEEP
6144:xpZ9NCb41A4/MHflcsSXli7suuDpeGzTvZ3:pnCb8/M/l+4+Lx
Malware Config
Signatures
Files
-
ef396871e73bab9c7147bc74a76433a73905e427a32908f6e0b7b810f03cf157.exe windows x86
28d3fad68d415658bd0a759a68aea87d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
ord526
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 232KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ