Static task
static1
Behavioral task
behavioral1
Sample
640981b2db24c52099bde7779c388e1363dfbfbc96df9817bcae05d72ec914ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
640981b2db24c52099bde7779c388e1363dfbfbc96df9817bcae05d72ec914ef.exe
Resource
win10v2004-20221111-en
General
-
Target
640981b2db24c52099bde7779c388e1363dfbfbc96df9817bcae05d72ec914ef
-
Size
40KB
-
MD5
107c1d4e4b811f8833b8cf23cb2e1ee0
-
SHA1
5560b5b56ab2db3c5b562a87e5b03385422a9c4b
-
SHA256
640981b2db24c52099bde7779c388e1363dfbfbc96df9817bcae05d72ec914ef
-
SHA512
dbb7feea302c510fb1c51f90d01ef292105ef93f5db6b90c0ebd48f3d6f1a881d195465cd8a953533dbb9626f8d9fbe0fa480fb768803b9cac5a51ba6fcee4c7
-
SSDEEP
768:3C4+AM/gXbN2V8kxrtI7Lg97npxNay2Aw1:32dMktoLg6
Malware Config
Signatures
Files
-
640981b2db24c52099bde7779c388e1363dfbfbc96df9817bcae05d72ec914ef.exe windows x86
7e7b67ef9e8178e2ae02c2712073fb31
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHBrowseForFolder
msvbvm60
ord589
MethCallEngine
ord513
ord669
ord522
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ