Static task
static1
Behavioral task
behavioral1
Sample
8b13f89e3342c7c59faa9dd9b6c33dd20ce18c7068f60810a6dd5fa7dd9af166.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8b13f89e3342c7c59faa9dd9b6c33dd20ce18c7068f60810a6dd5fa7dd9af166.exe
Resource
win10v2004-20220812-en
General
-
Target
8b13f89e3342c7c59faa9dd9b6c33dd20ce18c7068f60810a6dd5fa7dd9af166
-
Size
636KB
-
MD5
4facc435f11728e62f6190a5823c458a
-
SHA1
6e190c2b7b395315bba51a305010ea2f22d65143
-
SHA256
8b13f89e3342c7c59faa9dd9b6c33dd20ce18c7068f60810a6dd5fa7dd9af166
-
SHA512
340a02208f04cc7cbb9e3232a13b5193e5ab951546575280795c73b82c153dabf3989aeb47113a230e7942a4870bda5c5366f308115ba8e02228294dbad0b98f
-
SSDEEP
3072:2Ld5WXpYI+538b8Hpd3cN+UQTvK96iCAn+hQn2ThLUcDkNOVya189D2:2Sc18
Malware Config
Signatures
Files
-
8b13f89e3342c7c59faa9dd9b6c33dd20ce18c7068f60810a6dd5fa7dd9af166.exe windows x86
49fc08656f9ffcf7a0fc294258ef56bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord628
ord665
ord597
ord599
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
Sections
.text Size: 628KB - Virtual size: 627KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ