Static task
static1
Behavioral task
behavioral1
Sample
ef82de63eeac13d1728c6f98f8c4d025d8be28d8768f7df99ba75c0383789d95.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ef82de63eeac13d1728c6f98f8c4d025d8be28d8768f7df99ba75c0383789d95.exe
Resource
win10v2004-20221111-en
General
-
Target
ef82de63eeac13d1728c6f98f8c4d025d8be28d8768f7df99ba75c0383789d95
-
Size
188KB
-
MD5
1db4bb47583aad3e8795ffa9bea12acb
-
SHA1
dd4a2c7c9faa768c215ef6d12fa6af8c9529ebb0
-
SHA256
ef82de63eeac13d1728c6f98f8c4d025d8be28d8768f7df99ba75c0383789d95
-
SHA512
361ca83de60188c450f8b282b7289d0a39a9177589f7459778106d09f169750a830222af5991e5e94f71de3a90f70da1bf6b4e110c99b362eaf9693bdd75cb0b
-
SSDEEP
3072:WEXptNJfy942dkEUs7nT0tIszmbx/Bu0FvorZLFk27xvHJl9vFY9NJGXKF3G26VG:WmKbxIW6ZBk27xxl9C6Yas
Malware Config
Signatures
Files
-
ef82de63eeac13d1728c6f98f8c4d025d8be28d8768f7df99ba75c0383789d95.exe windows x86
b8c7ca35397915c117bd74d96531879d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord598
ord631
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord537
ord644
ord572
ord100
ord616
ord618
ord581
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE