Static task
static1
Behavioral task
behavioral1
Sample
16345f23c0cd9bb1feec644eece9bdc847534c6851d99c1890920748b98c97a2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
16345f23c0cd9bb1feec644eece9bdc847534c6851d99c1890920748b98c97a2.exe
Resource
win10v2004-20221111-en
General
-
Target
16345f23c0cd9bb1feec644eece9bdc847534c6851d99c1890920748b98c97a2
-
Size
252KB
-
MD5
3fc821721996911ed582647e20e54500
-
SHA1
308e99011f1515dd906268db1f6a7f59be91a709
-
SHA256
16345f23c0cd9bb1feec644eece9bdc847534c6851d99c1890920748b98c97a2
-
SHA512
9c8a20e0e2e3a12898d773b0938b1692902b8add888f614e47a2d4f42d9b485ecce287d51d4e13ea609d848945eca2ed008d9a48badf6cbdec81a75e8bd0ec85
-
SSDEEP
1536:ddtsL5WlGHik/oIAvMPpdIgkqPLi+xnOG3VoAEMG049TelddPHs7hkEE:Tk5WlGHikwvcIgkexnRVcv9KpM1kE
Malware Config
Signatures
Files
-
16345f23c0cd9bb1feec644eece9bdc847534c6851d99c1890920748b98c97a2.exe windows x86
0337190921fbeab87892fb5adbde8bf1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord517
ord595
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord716
ProcCallEngine
ord536
ord645
ord681
ord576
ord685
ord100
ord616
ord617
ord619
ord580
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE