Static task
static1
Behavioral task
behavioral1
Sample
b1c80fda6217a46e141dd6e64514b9765f930e96fb48bb8062a75cf1cc0dc0f5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1c80fda6217a46e141dd6e64514b9765f930e96fb48bb8062a75cf1cc0dc0f5.exe
Resource
win10v2004-20220901-en
General
-
Target
b1c80fda6217a46e141dd6e64514b9765f930e96fb48bb8062a75cf1cc0dc0f5
-
Size
120KB
-
MD5
d11cfeaafdba64a8a0b4a66e3e038b72
-
SHA1
01bbbde1dd783da10ad0e29a6b6226bf3b197f94
-
SHA256
b1c80fda6217a46e141dd6e64514b9765f930e96fb48bb8062a75cf1cc0dc0f5
-
SHA512
c488bdd4c3ab153bef9d5b8ada0b08c760a7fd3884e7ed0a99c8ebea1aeb88d0bcaf179172f184557b1388c7350f5b314c11bb82241e5624350e13a6a6aa7f41
-
SSDEEP
1536:Yh22gNddyez8th1+O8fth+EMu7C541GSXp9mh:YmJyez8tfqh+EMOC5Azm
Malware Config
Signatures
Files
-
b1c80fda6217a46e141dd6e64514b9765f930e96fb48bb8062a75cf1cc0dc0f5.exe windows x86
4afaa32f753d80451ce8cf859573c79f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord519
ord660
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord609
ProcCallEngine
ord535
ord536
ord537
ord644
ord645
ord648
ord570
ord571
ord573
ord685
ord100
ord611
ord612
ord616
ord617
ord619
ord546
ord581
Sections
.text Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ