Static task
static1
Behavioral task
behavioral1
Sample
efacae9f8fed7231f1a26e4e14544b6541bb2b6ee028be4186ef145848fff552.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efacae9f8fed7231f1a26e4e14544b6541bb2b6ee028be4186ef145848fff552.exe
Resource
win10v2004-20221111-en
General
-
Target
efacae9f8fed7231f1a26e4e14544b6541bb2b6ee028be4186ef145848fff552
-
Size
36KB
-
MD5
aa1c1e05662706cca099fe3f3b6de666
-
SHA1
aecedb4ff618d074e6025b599d91aaff10824df9
-
SHA256
efacae9f8fed7231f1a26e4e14544b6541bb2b6ee028be4186ef145848fff552
-
SHA512
fca18187d1b8faed2e908f5946e1ff2540b1fc789bb08ce71c5128d234ddd22c344c4942639d6bb4f7b922f9f71efc1e30d091440d6b81cbfe6625ade1c9cb8e
-
SSDEEP
768:VWKekBWCnJ5MKDN8SLG7z6ALzDTpFKrYutZmpK0:Y+AHoKD7
Malware Config
Signatures
Files
-
efacae9f8fed7231f1a26e4e14544b6541bb2b6ee028be4186ef145848fff552.exe windows x86
865f68e61bb0025d7c163caa73e1741c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord645
ord571
ord685
ord100
ord616
ord617
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ