Static task
static1
Behavioral task
behavioral1
Sample
5dd297b42612669b362f6a4493e37a79d9b0670ba76da0f0d4a9ea79546dafab.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5dd297b42612669b362f6a4493e37a79d9b0670ba76da0f0d4a9ea79546dafab.exe
Resource
win10v2004-20221111-en
General
-
Target
5dd297b42612669b362f6a4493e37a79d9b0670ba76da0f0d4a9ea79546dafab
-
Size
112KB
-
MD5
35e589fdd1467111a3eb6c39e49b1cc0
-
SHA1
5adc909d1aab92d06045e397f130db4573682855
-
SHA256
5dd297b42612669b362f6a4493e37a79d9b0670ba76da0f0d4a9ea79546dafab
-
SHA512
2ea9cfaefd80d2af5458deaed2e4e0c89627d0f7630ef74030698ac541daccf2d7e24f0816567e836c378ebc19dae7e04406627471ce7debfcc856e7d430467e
-
SSDEEP
1536:1xBla77qx4bKoheXtxmWFzVbK0OgcJiEiftIMMdk8W8ue0szBWp7:kqxcpheXDzdK0O6EiBMqourwS7
Malware Config
Signatures
Files
-
5dd297b42612669b362f6a4493e37a79d9b0670ba76da0f0d4a9ea79546dafab.exe windows x86
84ff5e547b7837520ae37fde9ddf8afb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord305
EVENT_SINK_AddRef
DllFunctionCall
ord670
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord570
ord575
ord100
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ