Static task
static1
Behavioral task
behavioral1
Sample
d6ea20c929c8a1789ffd74a800245511ba494fc653c65a8d860a4f9978af6072.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d6ea20c929c8a1789ffd74a800245511ba494fc653c65a8d860a4f9978af6072.exe
Resource
win10v2004-20221111-en
General
-
Target
d6ea20c929c8a1789ffd74a800245511ba494fc653c65a8d860a4f9978af6072
-
Size
92KB
-
MD5
abb188340bdb375bdd1caaeefb7e254d
-
SHA1
db15b6badb51e22cf457a421c9143b005b0913d6
-
SHA256
d6ea20c929c8a1789ffd74a800245511ba494fc653c65a8d860a4f9978af6072
-
SHA512
4a5a4f873714ed6f3f3532338f8afb43592d681383b2ee055ecf0fd001338ae432bf0af4bb8b48bfcd34a2052032a3282e12fbda2a531b02ad9dd37c002d45e4
-
SSDEEP
1536:hnO0Sd29qj4RKgeIAcqS/+4HNenTN2VqjGdfB2:A7jsKHtSJtuwVyGfB2
Malware Config
Signatures
Files
-
d6ea20c929c8a1789ffd74a800245511ba494fc653c65a8d860a4f9978af6072.exe windows x86
63b3c34045b57b02a8d1b0422ccf2572
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord626
ord666
ord595
ord598
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord570
ord648
ord571
ord100
ord616
ord619
ord581
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ