Static task
static1
Behavioral task
behavioral1
Sample
cf36f3cb98a8b3a117542d0d7c6f73912885dae8665e60407712e662910658c7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf36f3cb98a8b3a117542d0d7c6f73912885dae8665e60407712e662910658c7.exe
Resource
win10v2004-20220812-en
General
-
Target
cf36f3cb98a8b3a117542d0d7c6f73912885dae8665e60407712e662910658c7
-
Size
108KB
-
MD5
c1140dd2d0c5c47bf88ee86d84aa8baf
-
SHA1
10a65a5b0a6945271fe87b7cdfdf6c1159391b3b
-
SHA256
cf36f3cb98a8b3a117542d0d7c6f73912885dae8665e60407712e662910658c7
-
SHA512
916d74a0acefa500da552424d2334fb67bace7507a8abeb032858b2e40df8d4e00d73de1a71eb05c6453c0f3e2c9e6eba2d06ec5ddbda8069ea7ff994378d60c
-
SSDEEP
3072:A4TpFTtTUkfZkzkBUuFEI1ZCM1PqG9pT632FszuZMrBlBs7:AmR5vUul2NA
Malware Config
Signatures
Files
-
cf36f3cb98a8b3a117542d0d7c6f73912885dae8665e60407712e662910658c7.exe windows x86
ce3f435795c387ec178049fbf3358a37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord593
ord594
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ord537
ord644
ord570
ord648
ord572
ord573
ord681
ord685
ord578
ord100
ord619
ord581
Sections
. Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ