Static task
static1
Behavioral task
behavioral1
Sample
da17bdbf0027864ef7531bd237e27ef724e39217e4c8698c49ab00030b4510c3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
da17bdbf0027864ef7531bd237e27ef724e39217e4c8698c49ab00030b4510c3.exe
Resource
win10v2004-20221111-en
General
-
Target
da17bdbf0027864ef7531bd237e27ef724e39217e4c8698c49ab00030b4510c3
-
Size
496KB
-
MD5
fe4d07a7f198d26bda5780645d30547c
-
SHA1
d6e567e2e92790328aa69fb2f33340a2fc1edcb7
-
SHA256
da17bdbf0027864ef7531bd237e27ef724e39217e4c8698c49ab00030b4510c3
-
SHA512
d88ba6fddb13674966ef6df095daacbb704e85c088406c43340ba72a91a8406ad3cf0bb2b6a8b284bbff34f45c96305a214d33a01f66a007aa54be5f7db08c1f
-
SSDEEP
768:FQJIdldsJTLUsTmV2pOX6eJjfwI5dfvhTdSKQt6nkT:FQSg2Z6ezPvO2M
Malware Config
Signatures
Files
-
da17bdbf0027864ef7531bd237e27ef724e39217e4c8698c49ab00030b4510c3.exe windows x86
9aa60632ac28fe4b3c05845d6624ad59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord300
ord595
ord599
ord306
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord716
ProcCallEngine
ord644
ord537
ord648
ord572
ord578
ord100
ord616
ord618
ord581
Sections
.text Size: 488KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ