Static task
static1
Behavioral task
behavioral1
Sample
cf878d7f21af4f91307e9c495f179d3b2d6fc183f959995162eb82116e808292.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cf878d7f21af4f91307e9c495f179d3b2d6fc183f959995162eb82116e808292.exe
Resource
win10v2004-20220901-en
General
-
Target
cf878d7f21af4f91307e9c495f179d3b2d6fc183f959995162eb82116e808292
-
Size
925KB
-
MD5
07e69ab0af93e1454fc076a37ea9ec0a
-
SHA1
02522b4ff324ffc77e699076f8a5c584622422d7
-
SHA256
cf878d7f21af4f91307e9c495f179d3b2d6fc183f959995162eb82116e808292
-
SHA512
3e8dd632730d53a8ef20c519c2ec404e0321f51bb5163c77be5c2b6729e4ed4f3326f1de2da3b97656bcb13e2f461f11890a3f47c1149b8aa6370d9627f551c3
-
SSDEEP
24576:8cWPYU9GZxnBGVV3dSYVcD+ReTmH1FcUgTv6JPr:lWPvGZxnBGVV3NcKRLFcTOJPr
Malware Config
Signatures
Files
-
cf878d7f21af4f91307e9c495f179d3b2d6fc183f959995162eb82116e808292.exe windows x86
a6c7ed9b0e5271086df8b3fd493bb231
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
MethCallEngine
ord517
ord626
ord667
ord593
ord594
ord595
ord521
ord631
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord717
ord534
ProcCallEngine
ord535
ord536
ord537
ord681
ord578
ord685
ord100
ord616
ord618
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ