Static task
static1
Behavioral task
behavioral1
Sample
c645ec133c9a4f109cb8d434a1b232dda5b995ded45cbebf9881409573077043.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c645ec133c9a4f109cb8d434a1b232dda5b995ded45cbebf9881409573077043.exe
Resource
win10v2004-20221111-en
General
-
Target
c645ec133c9a4f109cb8d434a1b232dda5b995ded45cbebf9881409573077043
-
Size
260KB
-
MD5
c1cd1e5ecb50cee746110693826f4001
-
SHA1
9971e6822da4eb4eacbc0c1cae46c29579a5c354
-
SHA256
c645ec133c9a4f109cb8d434a1b232dda5b995ded45cbebf9881409573077043
-
SHA512
0bae208642fde84ad0d672f17b290d61968fa01e0703bccd0a38c794dd4147d7fb32a6c5176f254dfdbf72e162850110cf521df1f6113b43c8b9f3c32239ee45
-
SSDEEP
3072:GrYd6CJ2C7NwKPWln9ESiYtPJw7N46CJ2KYr:J6CJF7N9Wx1q7N46CJ
Malware Config
Signatures
Files
-
c645ec133c9a4f109cb8d434a1b232dda5b995ded45cbebf9881409573077043.exe windows x86
ccd11ff341e965f070685b75f1999f30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord517
ord626
ord593
ord594
ord520
ord708
ord631
ord632
ord526
EVENT_SINK_AddRef
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord606
ord607
ord608
ord716
ProcCallEngine
ord537
ord576
ord685
ord100
ord613
ord616
ord617
ord546
ord581
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ