Static task
static1
Behavioral task
behavioral1
Sample
1f803738b44788792aeab6eb47732042a7dba8d5bc161835bf0716222e224d11.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f803738b44788792aeab6eb47732042a7dba8d5bc161835bf0716222e224d11.exe
Resource
win10v2004-20220812-en
General
-
Target
1f803738b44788792aeab6eb47732042a7dba8d5bc161835bf0716222e224d11
-
Size
120KB
-
MD5
21ce489d6a187011018d6b6ec9a8eec0
-
SHA1
b8505293862467964e8c9eaf62cb039dacfd4184
-
SHA256
1f803738b44788792aeab6eb47732042a7dba8d5bc161835bf0716222e224d11
-
SHA512
8788ec8cd821d2eefb7e7f40ae24cb4c51e3e46835a1ce988cd9e2f832f2d8f3d039965b42415b1346a774aef4b1c02b1ecdb07156dfccae2c19453274af314e
-
SSDEEP
1536:YdCSRnXPFzUVgFee95raLwymmtBEdsUJwnSD9RnJ166E0mhlPdA9ORj:8HXPZUVBe9QLwyesUJwS5tv6Z7hlVS2
Malware Config
Signatures
Files
-
1f803738b44788792aeab6eb47732042a7dba8d5bc161835bf0716222e224d11.exe windows x86
1adb915c40d157051f5bd5d7bece9b23
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord589
ord305
EVENT_SINK_AddRef
DllFunctionCall
ord670
ord678
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ProcCallEngine
ord644
ord570
ord100
Sections
.text Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ