Static task
static1
Behavioral task
behavioral1
Sample
c71303380f6e368cffcaab1cdebc975bd64dd35279a4715c740c4da069990000.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c71303380f6e368cffcaab1cdebc975bd64dd35279a4715c740c4da069990000.exe
Resource
win10v2004-20221111-en
General
-
Target
c71303380f6e368cffcaab1cdebc975bd64dd35279a4715c740c4da069990000
-
Size
432KB
-
MD5
e79d22cae5d7a10a28a4f62e82d33b54
-
SHA1
554a9c1afd305f657d9ffac2d816012ac1b7d31a
-
SHA256
c71303380f6e368cffcaab1cdebc975bd64dd35279a4715c740c4da069990000
-
SHA512
558784eb47d1307098bd3f96a9e23e6af90f031bf6e13bc0f4f8b1a2d2b0d634d09fb75abd8a422397da4eaea24e6586486d4ccbcc7ac0863fd21bb81f10a4a4
-
SSDEEP
12288:5XhINt/PPMoFoyyGFxmhKdA6pwxz+naBJIx1jt:sffJoyyzhEPanI1jt
Malware Config
Signatures
Files
-
c71303380f6e368cffcaab1cdebc975bd64dd35279a4715c740c4da069990000.exe windows x86
0e9e2d22c63507932487317776285c92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord666
ord631
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord537
ord644
ord681
ord685
ord100
ord616
ord581
Sections
. Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 408KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ