Static task
static1
Behavioral task
behavioral1
Sample
9b6793cbb6647abeb9f3c0a54bbe8d84bb4276cf5abae88cdbe7de1a975ad012.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9b6793cbb6647abeb9f3c0a54bbe8d84bb4276cf5abae88cdbe7de1a975ad012.exe
Resource
win10v2004-20221111-en
General
-
Target
9b6793cbb6647abeb9f3c0a54bbe8d84bb4276cf5abae88cdbe7de1a975ad012
-
Size
120KB
-
MD5
0a20ebb5534de3aea9d33b937223c624
-
SHA1
fd0eb8b9d1523d3540f8229bb51b3c8af55da4d0
-
SHA256
9b6793cbb6647abeb9f3c0a54bbe8d84bb4276cf5abae88cdbe7de1a975ad012
-
SHA512
5709612951eff9e8d4857973e5fc869fd981ac09da2008962c0f69645cf9458d91587d1054f7d142b673a1264f4c8cf1b916198ef531dbcbd77d6fcbdfab9910
-
SSDEEP
1536:UO6xwPgEHflf9ZN1/1sQS15X6MCP1rHStRHr21p2v:UPiFtFZNJc7XASLL9v
Malware Config
Signatures
Files
-
9b6793cbb6647abeb9f3c0a54bbe8d84bb4276cf5abae88cdbe7de1a975ad012.exe windows x86
c760e1196855513f64e72513280039c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
user32
CallWindowProcA
msvbvm60
ord187
ord588
MethCallEngine
ord516
ord660
ord665
ord591
ord300
ord301
ord595
ord303
ord704
ord306
ord307
ord309
ord631
ord709
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord531
ord717
ord318
ProcCallEngine
ord537
ord644
ord645
ord647
ord648
ord681
ord685
ord578
ord100
ord614
ord616
ord617
ord619
ord545
ord581
Sections
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ