Static task
static1
Behavioral task
behavioral1
Sample
a3ab5fd77682e4072a142278a3119daa9a079b3a863820ac756610cf52f23b87.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3ab5fd77682e4072a142278a3119daa9a079b3a863820ac756610cf52f23b87.exe
Resource
win10v2004-20221111-en
General
-
Target
a3ab5fd77682e4072a142278a3119daa9a079b3a863820ac756610cf52f23b87
-
Size
220KB
-
MD5
3e5fbd262c3c8692dd376f86253413de
-
SHA1
b85f7a9b185ec176a60b1462edb6e47cff78b546
-
SHA256
a3ab5fd77682e4072a142278a3119daa9a079b3a863820ac756610cf52f23b87
-
SHA512
2132dc870b46b47399541769e33cd24d6479d13e3740dae24d4840211a8df327ff96dc0537acdd4f9b21d0938697b3536fac79e449046b4ba32e6ae44f581f92
-
SSDEEP
3072:5/amDwrWYyJEZfhq9avcxj/r3iU23NtZu+6smUbbouDvpOhMW+LeTA+H/lhsJTOp:ducJT6cxjbiU4O+67mDvI263sBOQoxB
Malware Config
Signatures
Files
-
a3ab5fd77682e4072a142278a3119daa9a079b3a863820ac756610cf52f23b87.exe windows x86
e0cfd3d90c5fea16b8b8c41edc39d4cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord617
ord581
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ