Static task
static1
Behavioral task
behavioral1
Sample
cab4478e6279b7945f821e8818f1c85238bd543c2d871bbb40cadba9f1768521.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cab4478e6279b7945f821e8818f1c85238bd543c2d871bbb40cadba9f1768521.exe
Resource
win10v2004-20221111-en
General
-
Target
cab4478e6279b7945f821e8818f1c85238bd543c2d871bbb40cadba9f1768521
-
Size
176KB
-
MD5
daa8a989423842b21464f33ed521a0a5
-
SHA1
592509bd182d7fa6881d355071bf893a3e28c39d
-
SHA256
cab4478e6279b7945f821e8818f1c85238bd543c2d871bbb40cadba9f1768521
-
SHA512
4f595b166a52c8dfb1b67235f20b5f942331a26770a5d37157bcc19c49d11c05875145cd9706ba9e1a72c704b51c960909d09589985d51ed98a62c76262dcc1f
-
SSDEEP
1536:DxNDLBCVi9NMIYuQASmS0mJJFL/XlvpjJaHxlmJUl60ReWWKI0pj8YQa2odbdt/l:9FqASmSjXy20pjz24TA8
Malware Config
Signatures
Files
-
cab4478e6279b7945f821e8818f1c85238bd543c2d871bbb40cadba9f1768521.exe windows x86
037d5d295d3e72f43cbd5f9051183adc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord187
ord696
MethCallEngine
ord518
ord593
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord100
ord431
ord616
ord617
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ