Static task
static1
Behavioral task
behavioral1
Sample
ee81ee85cacf9214c767010a32f1cdc2bbde1d0a5741cd5daf30bcc8910a85b8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ee81ee85cacf9214c767010a32f1cdc2bbde1d0a5741cd5daf30bcc8910a85b8.exe
Resource
win10v2004-20221111-en
General
-
Target
ee81ee85cacf9214c767010a32f1cdc2bbde1d0a5741cd5daf30bcc8910a85b8
-
Size
154KB
-
MD5
2bf5aa09b7e43907896e8dcb9574ee84
-
SHA1
428b459ab20b5ecc0db0a30806ab832c397641c1
-
SHA256
ee81ee85cacf9214c767010a32f1cdc2bbde1d0a5741cd5daf30bcc8910a85b8
-
SHA512
3f411596ff92f40ec7e0faf5c89e722a30e438d9b4dec4d2b25f0e2fbee09147e7a3459cee7cabb3401e716e1a130e8b01844290c79178303726d0ebe78e95c3
-
SSDEEP
3072:85ATAP3H2Pa9x4g1vdeNtl0qe128OsDJ/rQTX6EG/ttKtPhRp:wHp4g1+sCDsd/CX6Eat2hRp
Malware Config
Signatures
Files
-
ee81ee85cacf9214c767010a32f1cdc2bbde1d0a5741cd5daf30bcc8910a85b8.exe windows x86
fa2e061eee3d0e163d125c38b36b3e85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord537
ord644
ord572
ord100
ord616
ord618
ord581
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 348KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ