Static task
static1
Behavioral task
behavioral1
Sample
cec72f568699db74b927406e6abf59bf96ac90d4e142f271eea4062488995fff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cec72f568699db74b927406e6abf59bf96ac90d4e142f271eea4062488995fff.exe
Resource
win10v2004-20221111-en
General
-
Target
cec72f568699db74b927406e6abf59bf96ac90d4e142f271eea4062488995fff
-
Size
880KB
-
MD5
72543c0b06b8a65cb84ee695d26eb5df
-
SHA1
0416a52e16f0e1d36ebcf582962558e15e2d8b40
-
SHA256
cec72f568699db74b927406e6abf59bf96ac90d4e142f271eea4062488995fff
-
SHA512
94f2958b5443967961c9f1ba3895698da287341882341b04684145a9f1c1a043783c6aaa53048e32651df83ffa64c9e1feadd86dbb00aba9e13e7685929628bf
-
SSDEEP
6144:XCY7cMwIt8BvGGGGGGGGGGbGGGGGGGGGGoGGhGGoGqfBq2qWcjndDNrN/YEPqB7Q:T4MWipDrEipD
Malware Config
Signatures
Files
-
cec72f568699db74b927406e6abf59bf96ac90d4e142f271eea4062488995fff.exe windows x86
e34c7dd994e37c071e6e16e43f066ba6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord628
ord665
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ProcCallEngine
ord644
ord537
ord100
ord581
Sections
.text Size: 584KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ