Static task
static1
Behavioral task
behavioral1
Sample
f0a9979e50158f1ca6e5f48e942da4b9722df072772fda6a3d9f60a4dc992587.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f0a9979e50158f1ca6e5f48e942da4b9722df072772fda6a3d9f60a4dc992587.exe
Resource
win10v2004-20221111-en
General
-
Target
f0a9979e50158f1ca6e5f48e942da4b9722df072772fda6a3d9f60a4dc992587
-
Size
48KB
-
MD5
063d33b172bf9b047e37974b0a2b8dff
-
SHA1
d650ccffb63bb7551bfe279438518edb7834b8f4
-
SHA256
f0a9979e50158f1ca6e5f48e942da4b9722df072772fda6a3d9f60a4dc992587
-
SHA512
7a7f042cdec3aa956edb47aa9997f112f1706f99b8e355854d67a5bdb69998fa544decb0701938de8e7e147b94414c3ec3cf4605798a671f47967a4d1f3a53bc
-
SSDEEP
768:pZ3UbFdkGKzydajXkY/u1gh9zeBzBUsSwrX3L1p7L0kJOd3H:pu8zsOJMIav0kJi3
Malware Config
Signatures
Files
-
f0a9979e50158f1ca6e5f48e942da4b9722df072772fda6a3d9f60a4dc992587.exe windows x86
b8f7987bee60e1d079509bd9e47e560b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord595
ord598
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord716
ProcCallEngine
ord645
ord570
ord100
ord610
ord612
ord616
ord617
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ