Static task
static1
Behavioral task
behavioral1
Sample
6eafda5a6ca97b3deb51ee04fcc07507bc07f8e3e97328f1ce34489c66a29972.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6eafda5a6ca97b3deb51ee04fcc07507bc07f8e3e97328f1ce34489c66a29972.exe
Resource
win10v2004-20221111-en
General
-
Target
6eafda5a6ca97b3deb51ee04fcc07507bc07f8e3e97328f1ce34489c66a29972
-
Size
96KB
-
MD5
2054ccb889621b62f8a3ae7d1bbe6130
-
SHA1
29bd0f7a7f62c4d6a326049c0889c6dd34f22ed5
-
SHA256
6eafda5a6ca97b3deb51ee04fcc07507bc07f8e3e97328f1ce34489c66a29972
-
SHA512
54cf9df1e0f215bd74f140d0be33b43b19e803d6682fb67613b6a58d902f4eb98a39d4f4fb9c81e4fdb3002a05f8fa423d66fae05cf1daa03b5f3b1a1882ec70
-
SSDEEP
1536:QdzVmN6SA76Sh5KBXD6H5GVjUY2js0NjwGazF/0omdgU/FYaA4MS2xBnEGSJ6:wV8lSheuNYY7wGQF/0omdgU/FYaOEB6
Malware Config
Signatures
Files
-
6eafda5a6ca97b3deb51ee04fcc07507bc07f8e3e97328f1ce34489c66a29972.exe windows x86
231204c30513cdf63e0bfa48674b93a2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
netshell
DllCanUnloadNow
msvbvm60
MethCallEngine
ord669
ord592
ord524
EVENT_SINK_AddRef
ord560
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord652
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 714B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ