Static task
static1
Behavioral task
behavioral1
Sample
f95f65b4c42878fafc814f5eb1e62af3fe32cafbad6454b6d25743514b00c710.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f95f65b4c42878fafc814f5eb1e62af3fe32cafbad6454b6d25743514b00c710.exe
Resource
win10v2004-20221111-en
General
-
Target
f95f65b4c42878fafc814f5eb1e62af3fe32cafbad6454b6d25743514b00c710
-
Size
228KB
-
MD5
f6c420a320965df5f7e766a73ede8934
-
SHA1
fae37b05788130bf67c7914e6c6626d9f0171385
-
SHA256
f95f65b4c42878fafc814f5eb1e62af3fe32cafbad6454b6d25743514b00c710
-
SHA512
afff016368be5e1d6e969c031eeb4a9faaa6876c909212e9cd5ee61370f30a10839ad917dc48773611342490f2060f3ea248366b2b63d0dcc4a0864b4a34d24c
-
SSDEEP
3072:eD64wfWRrIMNRlZ62Pal2LBJXmzOHm5WZ3K+MCa3FqTcWEyxeL2mDHLz/5L5DEr0:46zepp3PJXCOGY3eJ3FRFyMdL5DEr6Uq
Malware Config
Signatures
Files
-
f95f65b4c42878fafc814f5eb1e62af3fe32cafbad6454b6d25743514b00c710.exe windows x86
73480dc120d7bb8c8f72250dd4a2c70d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord583
ord691
ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord598
ord520
ord631
ord709
ord632
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord670
ord671
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord649
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619
Sections
.text Size: 208KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ