Static task
static1
Behavioral task
behavioral1
Sample
ef65895ebd3e776d39b5b4dbc150fc0a6a6ac04347d42fc8b30361c8b5ccfce7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef65895ebd3e776d39b5b4dbc150fc0a6a6ac04347d42fc8b30361c8b5ccfce7.exe
Resource
win10v2004-20220812-en
General
-
Target
ef65895ebd3e776d39b5b4dbc150fc0a6a6ac04347d42fc8b30361c8b5ccfce7
-
Size
32KB
-
MD5
725a3d95129921585f6a7c2fc255584f
-
SHA1
6ab2f7d9d72ac60a2ebe9c21870c811c73f7e6f2
-
SHA256
ef65895ebd3e776d39b5b4dbc150fc0a6a6ac04347d42fc8b30361c8b5ccfce7
-
SHA512
2f8a114fd303731c8a13004d6b8f5ce40a03930ea0e25672f586cbbfd4a3ed71987275c94e55f0e0563ca7baf53242dd1523c313ed2d75bbe5298ada45f140cd
-
SSDEEP
384:mqNWvjs8+EzzX34hqS31d+SdunCiZDwE:A/XH6d1unCE0E
Malware Config
Signatures
Files
-
ef65895ebd3e776d39b5b4dbc150fc0a6a6ac04347d42fc8b30361c8b5ccfce7.exe windows x86
9cd116991a3118e75847200e9f8b2837
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ProcCallEngine
ord644
ord537
ord576
ord100
ord616
ord617
ord619
ord546
ord580
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ