Static task
static1
Behavioral task
behavioral1
Sample
c5d24fe42ea8a40faf180849897a9ac300c621724b1dd67212e1685391710aa4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5d24fe42ea8a40faf180849897a9ac300c621724b1dd67212e1685391710aa4.exe
Resource
win10v2004-20220812-en
General
-
Target
c5d24fe42ea8a40faf180849897a9ac300c621724b1dd67212e1685391710aa4
-
Size
624KB
-
MD5
ebcba79ae3884d298cbfad42246d57a4
-
SHA1
64339d8318947133f9e16f3de08b797a07424edb
-
SHA256
c5d24fe42ea8a40faf180849897a9ac300c621724b1dd67212e1685391710aa4
-
SHA512
b40cf6574ffe76c15323977e634a1278a064fbd85e67b208638a3c7e6d49670e2cecfb5194ca02307ba8be01c0691e2e60855d1bd1098bffb21e403fa4eae8fd
-
SSDEEP
6144:iLHImwzme7sx+BG6MCVVj5773D4qEEsFBvGeeHOPdMGWCR/bB9bfudthjesQXiu1:+GVBG6MC57TM2sffV1sC9B9budtU7
Malware Config
Signatures
Files
-
c5d24fe42ea8a40faf180849897a9ac300c621724b1dd67212e1685391710aa4.exe windows x86
798ee216dbb99b00f4b5001c0c2458e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord572
ord573
ord681
ord576
ord578
ord685
ord100
ord616
ord617
ord619
ord581
Sections
.text Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ