Static task
static1
Behavioral task
behavioral1
Sample
c16a2d8c5f1729c0222cdf94dbb038ccfd64e17ca532af570e5f241bcde52dc5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c16a2d8c5f1729c0222cdf94dbb038ccfd64e17ca532af570e5f241bcde52dc5.exe
Resource
win10v2004-20220812-en
General
-
Target
c16a2d8c5f1729c0222cdf94dbb038ccfd64e17ca532af570e5f241bcde52dc5
-
Size
24KB
-
MD5
0b0fef7849b1e403263de2e40bf9c5a0
-
SHA1
6e88bf307d0432030edb5d465de708ad7bbe1f46
-
SHA256
c16a2d8c5f1729c0222cdf94dbb038ccfd64e17ca532af570e5f241bcde52dc5
-
SHA512
b47b3ea54f64f7934471b8782b45ca56f70d8c5b0e7d69697eb0f0af3e67c2682389abed261e0f7ca7a397e087e6e2f439708271562ddd7ea000ee8ce31f6e03
-
SSDEEP
384:U1JK/lldy6Y41FYsJ84H5y1HDgd5OogHt0F:UnQZY41FY2p5aUuy
Malware Config
Signatures
Files
-
c16a2d8c5f1729c0222cdf94dbb038ccfd64e17ca532af570e5f241bcde52dc5.exe windows x86
4af22468a0726e72a3433e7241c4c3db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
ord583
MethCallEngine
ord516
ord554
ord664
ord592
ord522
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord571
ord100
ord687
ord689
ord610
ord616
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ