Static task
static1
Behavioral task
behavioral1
Sample
9256973956fe6b8030d29146f21e48112d5770a34c6e774b30906ee5fb0bcfe3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9256973956fe6b8030d29146f21e48112d5770a34c6e774b30906ee5fb0bcfe3.exe
Resource
win10v2004-20220901-en
General
-
Target
9256973956fe6b8030d29146f21e48112d5770a34c6e774b30906ee5fb0bcfe3
-
Size
36KB
-
MD5
a81aeb07f77f596022e343ec1dd6919a
-
SHA1
5a8e66dcf40aa4c0619a673033c2123cde5ade16
-
SHA256
9256973956fe6b8030d29146f21e48112d5770a34c6e774b30906ee5fb0bcfe3
-
SHA512
93a27304b44617d581585519ccd7c541c8fa8977567c598697a8b18440d5f0fcf3d885312d1e108c94959a0c48b68b848a24279e2b4ee354b2fb9ccef97f987f
-
SSDEEP
768:NUNSNj6yl5MHtY8dLGfz6TyDfpFKrYuttuia:NUNE6pTttyDJ
Malware Config
Signatures
Files
-
9256973956fe6b8030d29146f21e48112d5770a34c6e774b30906ee5fb0bcfe3.exe windows x86
865f68e61bb0025d7c163caa73e1741c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord645
ord571
ord685
ord100
ord616
ord617
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ