Static task
static1
Behavioral task
behavioral1
Sample
aae788c1ef825d2b8f22f56a4e357c7c17a999b2d4deb4580c9e5d3945024f1f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aae788c1ef825d2b8f22f56a4e357c7c17a999b2d4deb4580c9e5d3945024f1f.exe
Resource
win10v2004-20221111-en
General
-
Target
aae788c1ef825d2b8f22f56a4e357c7c17a999b2d4deb4580c9e5d3945024f1f
-
Size
588KB
-
MD5
87e7f351ce032ab2001dbf62d64a4e73
-
SHA1
e5071cd62ebf132760d51a74e504a08796bd75bb
-
SHA256
aae788c1ef825d2b8f22f56a4e357c7c17a999b2d4deb4580c9e5d3945024f1f
-
SHA512
f84d7704f4dc307faefb11ed7a66b82481cc9f2e83b5cbd5308e4eb53143aa44f502822b1d69942db048589fc804d81547176dbdccd1932af3bd733b92a0195d
-
SSDEEP
12288:7XWbzElddfLsZlPj2pspFDjxsDKSr3hpFMaq/NI:7mbYddfQuypxODzPKI
Malware Config
Signatures
Files
-
aae788c1ef825d2b8f22f56a4e357c7c17a999b2d4deb4580c9e5d3945024f1f.exe windows x86
ec82f838b1dac8e055f6699aff80e133
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord300
ord595
ord599
ord306
ord631
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord100
Sections
0 Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE