Static task
static1
Behavioral task
behavioral1
Sample
e56605fa773292eebf792d0972f83f1a5a7fc9369c1b9fd5107b7269442ca756.exe
Resource
win7-20220812-en
General
-
Target
e56605fa773292eebf792d0972f83f1a5a7fc9369c1b9fd5107b7269442ca756
-
Size
508KB
-
MD5
30157f10be4d5d5c110b974d462a1993
-
SHA1
3004d72c236320f022046f7a75652e065b9f4775
-
SHA256
e56605fa773292eebf792d0972f83f1a5a7fc9369c1b9fd5107b7269442ca756
-
SHA512
a7575d676be1ce969d60ea56a2b0e047893889dd27df4070907cba050cbb07e1ed210231342a63d649c572bb6b1f16458673f1e5591d9ecaa5ad63a18ce2c6f3
-
SSDEEP
12288:LieTvZXjKTzswboCiKTCuwFnilyhHJQy2O9+O:L1TvtKTzs5AWJQy2O7
Malware Config
Signatures
Files
-
e56605fa773292eebf792d0972f83f1a5a7fc9369c1b9fd5107b7269442ca756.exe windows x86
dfa5ffad8eac71a7f4d657763f159c5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord716
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord616
ord619
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dhDV Size: 424KB - Virtual size: 424KB