Static task
static1
Behavioral task
behavioral1
Sample
c0182662cbed15f42587985205497cf4143b15a28e1f5828e4397d157f348a0b.exe
Resource
win7-20220812-en
General
-
Target
c0182662cbed15f42587985205497cf4143b15a28e1f5828e4397d157f348a0b
-
Size
240KB
-
MD5
b6606a6a854ee4d9b636014a00406511
-
SHA1
00e29fdbb2e3bbb40803806b30ef62d093cf3216
-
SHA256
c0182662cbed15f42587985205497cf4143b15a28e1f5828e4397d157f348a0b
-
SHA512
c04555d8bcaf2e380eaf9cea5fabd3dc299a5ecc78c9856087e80ec0795f23e3c83a59dc998677e6ac688214bda1d234a4fa1139a0a63bb6bc9ac38e0bf8d6aa
-
SSDEEP
6144:jcUK3qDpvTT6LDuibG4f9rj7nz/xXDXn8LjU+:jcU7TOLDuibrl7ndMj9
Malware Config
Signatures
Files
-
c0182662cbed15f42587985205497cf4143b15a28e1f5828e4397d157f348a0b.exe windows x86
f2ba1e6021ee51caa7059c5e0d62d110
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlMoveMemory
msvbvm60
MethCallEngine
ord516
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord644
ord100
ord617
Sections
.text Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE