Static task
static1
Behavioral task
behavioral1
Sample
b1c3c8f9ed339f105bced78eecaceb38b792860920089090603d961db3a3c531.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b1c3c8f9ed339f105bced78eecaceb38b792860920089090603d961db3a3c531.exe
Resource
win10v2004-20220901-en
General
-
Target
b1c3c8f9ed339f105bced78eecaceb38b792860920089090603d961db3a3c531
-
Size
44KB
-
MD5
271a44e6f6fc50b424a25d29cffa56f8
-
SHA1
6917bac91db5df9ab692ec06b898180d50341822
-
SHA256
b1c3c8f9ed339f105bced78eecaceb38b792860920089090603d961db3a3c531
-
SHA512
854549cb96ac2eca8df4af49e857dff14328ddcf4aaeabf95e05feb83c258f041ff6a87a05fc5b3c86d56825fc2052375ab40134d40d793d0f20d4396cb7d8d7
-
SSDEEP
768:NMWC2wsGCfxuHMJS06L5FBFy1CX3d0AbWh6TAfVZ6Zqxu:r7wsGC/IrBP
Malware Config
Signatures
Files
-
b1c3c8f9ed339f105bced78eecaceb38b792860920089090603d961db3a3c531.exe windows x86
ebdc8c51edb8f7609de451d8fab164ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ProcCallEngine
ord535
ord571
ord685
ord100
ord616
ord617
ord581
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ