Static task
static1
Behavioral task
behavioral1
Sample
ef97e6ff83ea9b8d6504ffaa47df50464c2914837077f83875ed093f312638bd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef97e6ff83ea9b8d6504ffaa47df50464c2914837077f83875ed093f312638bd.exe
Resource
win10v2004-20220812-en
General
-
Target
ef97e6ff83ea9b8d6504ffaa47df50464c2914837077f83875ed093f312638bd
-
Size
36KB
-
MD5
97cc48357f63565eb6b8a7b4b9ec04a4
-
SHA1
8f0e3cccf8bc15fdcdf9ec8c0c7f7689974b1256
-
SHA256
ef97e6ff83ea9b8d6504ffaa47df50464c2914837077f83875ed093f312638bd
-
SHA512
82e85c4140fbd9cca6500a8d1d75a4b3e33effb6ce0955d8e8aef4bdb4bea6674884e03e305edaf26b60c249823cfd0604f1694135f01b15d66c1ca2554507b8
-
SSDEEP
768:suZD0zfBq2P5MaZj66+Wz6GwoFKrYutbqjK:suZ4z9uBp
Malware Config
Signatures
Files
-
ef97e6ff83ea9b8d6504ffaa47df50464c2914837077f83875ed093f312638bd.exe windows x86
bab709d462353166ca51d4deb27073f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord593
ord594
ord595
ord598
ord631
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord715
ProcCallEngine
ord645
ord571
ord685
ord100
ord617
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ