Static task
static1
Behavioral task
behavioral1
Sample
7f0012fbbcb96f3b0e908e762b153ba34c7c5177da8c828cab73eba6b7e0ee54.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7f0012fbbcb96f3b0e908e762b153ba34c7c5177da8c828cab73eba6b7e0ee54.exe
Resource
win10v2004-20221111-en
General
-
Target
7f0012fbbcb96f3b0e908e762b153ba34c7c5177da8c828cab73eba6b7e0ee54
-
Size
159KB
-
MD5
04e5496c7904cdb139ddd5b869297b50
-
SHA1
0553fd2f3bde22c75036e86ebfdeb1c77e6fc4ec
-
SHA256
7f0012fbbcb96f3b0e908e762b153ba34c7c5177da8c828cab73eba6b7e0ee54
-
SHA512
181f0276d1928993be60a07fd1d09892a1f98d4ce04986e74f6ab9e34551384843e945f5fc5d2bb1ba51c753469bcf1394e4c73d1610de629adf09b9abe4a53e
-
SSDEEP
3072:zUxptMFFKRn03vjNhBEM243atUg37rImkK04O0:zWCsJu/d2Sat/vIL8f
Malware Config
Signatures
Files
-
7f0012fbbcb96f3b0e908e762b153ba34c7c5177da8c828cab73eba6b7e0ee54.exe windows x86
b9383b0dbd844ffd279aedc70a4265a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DeregisterEventSource
msvbvm60
ord183
ord589
ord553
ord668
ord594
EVENT_SINK_AddRef
DllFunctionCall
ord563
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord537
ord644
ord570
ord100
ord615
ord432
ord547
Sections
.text Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ