Static task
static1
Behavioral task
behavioral1
Sample
d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe
Resource
win10v2004-20220812-en
General
-
Target
d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4
-
Size
388KB
-
MD5
7096f95f174ba9b0f0592b78c307f13d
-
SHA1
80d0606a9937d14dddebd5034fce98750780ba68
-
SHA256
d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4
-
SHA512
497435d2e16f9dad2dc2e78898ffdb04d62e68d2ce5dfb9b3ac4906811652ece049d8065206dc748aa073994a10f30b64456fb643e5674218578c733230e6baf
-
SSDEEP
3072:lRMiMDcyj5IFVwAZlwys9ldN/i4+0ZhuW+mP34s5SGr+culS9F9xrj69:lRMiE79KwAZlVs9/smu2AVuKS9FH6
Malware Config
Signatures
Files
-
d6a8f5ed5f6f7c43f78f96ae4545bbb960de3ba39822af6337b6c08e1abd20f4.exe windows x86
57aec85b8994baa395f873f824332fb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlMoveMemory
msvbvm60
MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord644
ord100
ord616
Sections
.text Size: 268KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE