Static task
static1
Behavioral task
behavioral1
Sample
a1649327ec80cd64b547a7e9692644fb2aec1ff4ccf691570d21ba29e671351c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1649327ec80cd64b547a7e9692644fb2aec1ff4ccf691570d21ba29e671351c.exe
Resource
win10v2004-20220901-en
General
-
Target
a1649327ec80cd64b547a7e9692644fb2aec1ff4ccf691570d21ba29e671351c
-
Size
337KB
-
MD5
68146a53d67f1d0b55a711aa4ad8195c
-
SHA1
13a8302f922730ce550f3562b9fdec116a6743c3
-
SHA256
a1649327ec80cd64b547a7e9692644fb2aec1ff4ccf691570d21ba29e671351c
-
SHA512
49da800e911923f800e04c6adc228a1371d2db548c8b01bea673b387f1bab9b1f71455de1b55554db5bbb555188a87bf64861f0ea77b8e6580c85cbfa3f7a95e
-
SSDEEP
3072:gdzHk/q/mt0hBNehgJImYROnnKHxxRpAF9EGNeK8ul5CC39Twz2sOdzw75FBNEc0:nyZwdxsVw71Q
Malware Config
Signatures
Files
-
a1649327ec80cd64b547a7e9692644fb2aec1ff4ccf691570d21ba29e671351c.exe windows x86
d0652185454e3448b8149f52efdaac11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord300
ord595
ord303
ord599
ord306
ord309
ord631
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord100
ord581
Sections
.text Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE