Static task
static1
Behavioral task
behavioral1
Sample
b6c97a0d631d0dbf09ac2d80afbe208a6bcc389b67973fe4ea3218a6d9780e14.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6c97a0d631d0dbf09ac2d80afbe208a6bcc389b67973fe4ea3218a6d9780e14.exe
Resource
win10v2004-20221111-en
General
-
Target
b6c97a0d631d0dbf09ac2d80afbe208a6bcc389b67973fe4ea3218a6d9780e14
-
Size
76KB
-
MD5
fe59be175545949d77e71f9b3a0192ac
-
SHA1
38b6a2fe5b9c7137ad8c2816f82493ca4f7e0825
-
SHA256
b6c97a0d631d0dbf09ac2d80afbe208a6bcc389b67973fe4ea3218a6d9780e14
-
SHA512
06ca79dc203f1537022084cf3c1cd6ab987456fdf22a527d8ffdca64da423c2d324acbe460888188cafc8ed67bd163c42eef295556c74967269773a887334989
-
SSDEEP
768:e41oH8MQzsS87EZiFq5X2mO8A0AO02Z6Be1nf3XwImB9VD/fG8II2xjwlDD4Tg2M:vPzsSEM9VK250jcIBgLC9ac
Malware Config
Signatures
Files
-
b6c97a0d631d0dbf09ac2d80afbe208a6bcc389b67973fe4ea3218a6d9780e14.exe windows x86
0b88039a6075d437b54dc62f85d69146
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord583
ord584
ord585
ord587
MethCallEngine
ord516
ord666
ord593
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord575
ord100
ord617
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ