Static task
static1
Behavioral task
behavioral1
Sample
bbd1c778a3f584bcbaf5d191ded9ecb75cc2490d2ef9c303034b4a554853a271.exe
Resource
win7-20220812-en
General
-
Target
bbd1c778a3f584bcbaf5d191ded9ecb75cc2490d2ef9c303034b4a554853a271
-
Size
448KB
-
MD5
4fc2a58e7b2fa41df97642470bb2875a
-
SHA1
f09956ecb04ffaa2be270aca1ffd36b60cb0e6f8
-
SHA256
bbd1c778a3f584bcbaf5d191ded9ecb75cc2490d2ef9c303034b4a554853a271
-
SHA512
61c310e7d28fbb7b3a9603f305b24278d978ac8dcbfc3916cdc4526e4238fd4a84d64c75487984ab1dd5080c1c722678f53c637a09b4e528089ba3c4c25f77b9
-
SSDEEP
12288:JEM8yH7hnFx0AeXTnijhdRxtPDE57ibVLi:WM8yH7hn0vTn2hLxZDOci
Malware Config
Signatures
Files
-
bbd1c778a3f584bcbaf5d191ded9ecb75cc2490d2ef9c303034b4a554853a271.exe windows x86
e8f1a3ade8d72592fda5db662b35c475
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord666
ord595
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord570
ord100
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ