Static task
static1
Behavioral task
behavioral1
Sample
cf6437297b6702de4570c747c68de2067f1e42d9d9155fe0934b1901fe181bec.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf6437297b6702de4570c747c68de2067f1e42d9d9155fe0934b1901fe181bec.exe
Resource
win10v2004-20221111-en
General
-
Target
cf6437297b6702de4570c747c68de2067f1e42d9d9155fe0934b1901fe181bec
-
Size
24KB
-
MD5
102a79dfe77646c975c6c2a7233c34ba
-
SHA1
5f786fe2ac4628d60a0168d5f8344b3aba6d665e
-
SHA256
cf6437297b6702de4570c747c68de2067f1e42d9d9155fe0934b1901fe181bec
-
SHA512
b28f584e296fce4a910b8a82bc8c3e46c80645db8c5ff00281e61900c5c874a69af77abbdc29a252fa0971ab237b31d53388479c24fe951460866544b017d271
-
SSDEEP
384:eNuA0YN7b46+aU43BtgiiHEMBtuTn7O4hZEbxw:KuZp6rNiJmBzEm
Malware Config
Signatures
Files
-
cf6437297b6702de4570c747c68de2067f1e42d9d9155fe0934b1901fe181bec.exe windows x86
2b675bc84a22864f230a8789a2462768
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord585
ord187
ord587
MethCallEngine
ord516
ord661
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord318
ord717
ProcCallEngine
ord644
ord645
ord100
ord687
ord616
ord541
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ