Static task
static1
Behavioral task
behavioral1
Sample
685e08dcd2f251681426753d8a11fc7cdda8c1cf9c152a8ccd6e9e21d947d917.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
685e08dcd2f251681426753d8a11fc7cdda8c1cf9c152a8ccd6e9e21d947d917.exe
Resource
win10v2004-20220812-en
General
-
Target
685e08dcd2f251681426753d8a11fc7cdda8c1cf9c152a8ccd6e9e21d947d917
-
Size
228KB
-
MD5
21a390af1fd899cfeb7c2354082f1840
-
SHA1
401f9cf0c6f53cef1f79ceb4492801bf2e250db4
-
SHA256
685e08dcd2f251681426753d8a11fc7cdda8c1cf9c152a8ccd6e9e21d947d917
-
SHA512
c6abc4529b9eedf3a45f0681d373b8deba2f961ebfc92fbb607efe16ded1f1c8b2bc4bd775a8212860abae413aa33b0e3d2cfcf8ec9b34df88ecf7ddcff9be8b
-
SSDEEP
6144:wzz3lZiu5dqmYN1v4579/piV1POH1f+9GolHSfHXovNvunQyMqtnh/wqJ:B
Malware Config
Signatures
Files
-
685e08dcd2f251681426753d8a11fc7cdda8c1cf9c152a8ccd6e9e21d947d917.exe windows x86
b7d021804608f39f536438dd026bc733
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord187
MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord632
EVENT_SINK_AddRef
ord527
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord681
ord100
ord431
ord616
ord617
ord618
ord619
Sections
.text Size: 220KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ