Static task
static1
Behavioral task
behavioral1
Sample
a3f6c26e6243405cdc6d2dba601929e8db0f9cbe4062cef7d78b304d74d03bf9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3f6c26e6243405cdc6d2dba601929e8db0f9cbe4062cef7d78b304d74d03bf9.exe
Resource
win10v2004-20220901-en
General
-
Target
a3f6c26e6243405cdc6d2dba601929e8db0f9cbe4062cef7d78b304d74d03bf9
-
Size
172KB
-
MD5
676c112621b900e9b1c09674a9e1a248
-
SHA1
8a2a4bf36735cc10d576dc5b9efe59f97869cd3c
-
SHA256
a3f6c26e6243405cdc6d2dba601929e8db0f9cbe4062cef7d78b304d74d03bf9
-
SHA512
84b4bab80ffbec5fcceeb0f2f93ff1a5f657046013df2dab706ea9f189cdd9dbd41e676fb27c9c2a422073fcc54a9ecc2a030ad83534a18382b8850e09f6638f
-
SSDEEP
1536:mIR0Di1+DE5V6TUb26H4Vl1RRckRQN5UkYGN6YBmCM:mIXbtCYMomkYOJB
Malware Config
Signatures
Files
-
a3f6c26e6243405cdc6d2dba601929e8db0f9cbe4062cef7d78b304d74d03bf9.exe windows x86
ceb8e5c88bde0f413dc136fba4410f95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
__vbaCopyBytes
ord666
ord667
ord595
ord598
ord631
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord570
ord648
ord100
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jk3 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_MEM_WRITE
jmoe3 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE