Static task
static1
Behavioral task
behavioral1
Sample
34859f9b1257a6abd167524a7f2c239814c09ca676f4dd1093a383ebfd600f0a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
34859f9b1257a6abd167524a7f2c239814c09ca676f4dd1093a383ebfd600f0a.exe
Resource
win10v2004-20221111-en
General
-
Target
34859f9b1257a6abd167524a7f2c239814c09ca676f4dd1093a383ebfd600f0a
-
Size
488KB
-
MD5
6bfcaa25ef8217bec7347e5b80e44e89
-
SHA1
dcd652952a55cfdd5404aaf56b30153a5e924dce
-
SHA256
34859f9b1257a6abd167524a7f2c239814c09ca676f4dd1093a383ebfd600f0a
-
SHA512
0f01be59976e69f306724ff52d0c2ec1851fd42be3bfeaa94ad25d4bfd5953d4ff737f4a8ae47df9b27b401a8298d9925b13de92d03135bbfaa0da31d1b0796b
-
SSDEEP
12288:MzqfWoU+CtouDGNXvmkgifJ5x6pqVd2wIwLgp:MzqfS+CtdAXvmAfJ5x1K4M
Malware Config
Signatures
Files
-
34859f9b1257a6abd167524a7f2c239814c09ca676f4dd1093a383ebfd600f0a.exe windows x86
c1e658f1680563fab4313530c0bdcd79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord665
ord666
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord717
ProcCallEngine
ord644
ord648
ord100
Sections
.text Size: 256KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 228KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ