Static task
static1
Behavioral task
behavioral1
Sample
bf06d515244ad444c31d8ea491bde754fdd06fc1d1324534a3f1302babba8cc8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf06d515244ad444c31d8ea491bde754fdd06fc1d1324534a3f1302babba8cc8.exe
Resource
win10v2004-20221111-en
General
-
Target
bf06d515244ad444c31d8ea491bde754fdd06fc1d1324534a3f1302babba8cc8
-
Size
36KB
-
MD5
fdafaeadc02d592717aa98bc6b9cd58d
-
SHA1
c260fc9926141753fb1d62c729d431e08b662261
-
SHA256
bf06d515244ad444c31d8ea491bde754fdd06fc1d1324534a3f1302babba8cc8
-
SHA512
bd870aa2754bcfc7b0ac32910e0f9836cd99a949ec6c4da37cd4dea1214d3757da71f493a9e3e3dad973d7a3cd912d879f6cee6ede4547ed18975f74fe050635
-
SSDEEP
768:cHdi0Gw8Fqoy5MeWBz6vDzpFKrYutAe9pQ:cHdRIF/MDe9i
Malware Config
Signatures
Files
-
bf06d515244ad444c31d8ea491bde754fdd06fc1d1324534a3f1302babba8cc8.exe windows x86
68af3d26b5c2bfa06a8d70f2dd1dee8e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord645
ord571
ord685
ord100
ord616
ord617
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ