Static task
static1
Behavioral task
behavioral1
Sample
6a5bb1cab4fa35ca3d25780769ab478ba1ce103a32f9309e0fa0d116af908827.exe
Resource
win7-20221111-en
General
-
Target
6a5bb1cab4fa35ca3d25780769ab478ba1ce103a32f9309e0fa0d116af908827
-
Size
652KB
-
MD5
7109765e2d9d826f944b0f036646c807
-
SHA1
8b5a5e09955255f96bef257c75d61293aa8349c1
-
SHA256
6a5bb1cab4fa35ca3d25780769ab478ba1ce103a32f9309e0fa0d116af908827
-
SHA512
f8cd50fd8f62af957b95afcd33a1f44f22c47193724f1f3bd24c0e542235b0b3d03e2bc7c1b0b34052d2f34a0f384d443424f108c713a0a722bd2102de099683
-
SSDEEP
12288:4ZLX9MPOdJp7TWoGXI4mx2OrQsUjishcnJNBzPcm5Gw:41XDJ1yRXIsvPUJbzkrw
Malware Config
Signatures
Files
-
6a5bb1cab4fa35ca3d25780769ab478ba1ce103a32f9309e0fa0d116af908827.exe windows x86
eae53c081ea8224c0ef1a707da77f7a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord626
ord661
ord666
ord300
ord595
ord598
ord306
ord520
ord631
ord632
ord525
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord576
ord578
ord100
ord616
ord617
ord619
ord546
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2304.0MB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc_0 Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ