Static task
static1
Behavioral task
behavioral1
Sample
f9c89f35d0271f80f11d4a144c55696cdce998fb2f358310e6fedfe23320c1bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9c89f35d0271f80f11d4a144c55696cdce998fb2f358310e6fedfe23320c1bd.exe
Resource
win10v2004-20220812-en
General
-
Target
f9c89f35d0271f80f11d4a144c55696cdce998fb2f358310e6fedfe23320c1bd
-
Size
64KB
-
MD5
318ab943a2951a794cb587578f58e8c8
-
SHA1
0456a867b4dacb6ce181a1dd4846574a87f72529
-
SHA256
f9c89f35d0271f80f11d4a144c55696cdce998fb2f358310e6fedfe23320c1bd
-
SHA512
a1252c742e119668fb1685e32e44b484e6737c6307f8c713a23377fa55ba17e78d813e96adad1d8dc202359d6d2bb605092c373d33440bcb6fda957e16c0fbbd
-
SSDEEP
768:4aTw1NFlWTcJZkwKepy8rNyoesJigMRNwTrJu7yfQ0G2H6NOkKamhJeFKaT:ZTw1NDWYJiwKnts0gMR5D2H6tK1SrT
Malware Config
Signatures
Files
-
f9c89f35d0271f80f11d4a144c55696cdce998fb2f358310e6fedfe23320c1bd.exe windows x86
18e123c0cd00b1da1f598969992c8c79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord666
ord667
ord593
ord594
ord598
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord716
ord531
ProcCallEngine
ord535
ord644
ord537
ord645
ord570
ord681
ord685
ord100
ord616
ord617
ord618
ord619
ord580
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ