Static task
static1
Behavioral task
behavioral1
Sample
917ea690d390d30d44e6ee708f55e31b10147f0f968c2a956d97a578ce141853.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
917ea690d390d30d44e6ee708f55e31b10147f0f968c2a956d97a578ce141853.exe
Resource
win10v2004-20220812-en
General
-
Target
917ea690d390d30d44e6ee708f55e31b10147f0f968c2a956d97a578ce141853
-
Size
64KB
-
MD5
0ca0c238a3d1110047ed8b69f0a7e9d1
-
SHA1
777b5e0ef28caf806415e88dcf9cd3a2bd65de6c
-
SHA256
917ea690d390d30d44e6ee708f55e31b10147f0f968c2a956d97a578ce141853
-
SHA512
09fe8932cd0bfc00c3e2ff8b27516c44e967d8bf203fad60f894abea5563ce2a6bbad2973231de300113a2a4bdb78ef17c020671c1a49b4d9c97ab410551ce77
-
SSDEEP
1536:jI4aOeiWQa+NWAKxFN1Gt5qQZ+0oVQF/BFm95EH:jI4aOK/QF5FmL6
Malware Config
Signatures
Files
-
917ea690d390d30d44e6ee708f55e31b10147f0f968c2a956d97a578ce141853.exe windows x86
87999a3d7c16c0dd38b7fd943c4b5d95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord693
MethCallEngine
ord512
ord516
ord519
ord628
ord666
ord593
ord594
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord716
ord717
ProcCallEngine
ord537
ord645
ord648
ord571
ord572
ord573
ord681
ord576
ord578
ord685
ord100
ord579
ord616
ord617
ord618
ord619
ord541
ord650
ord546
ord580
ord581
Sections
.xd38 Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d38 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Wd38 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.x38 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ