Static task
static1
Behavioral task
behavioral1
Sample
fbbedba5fe8f044339b75a29aa9cbacc89c9156eeaa5f6d349969ab2c98a519c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fbbedba5fe8f044339b75a29aa9cbacc89c9156eeaa5f6d349969ab2c98a519c.exe
Resource
win10v2004-20220812-en
General
-
Target
fbbedba5fe8f044339b75a29aa9cbacc89c9156eeaa5f6d349969ab2c98a519c
-
Size
44KB
-
MD5
84bd9509a4bcade9a66ad47cded911ff
-
SHA1
298c0ce9368de3b851fa73aed0062a0a91452a59
-
SHA256
fbbedba5fe8f044339b75a29aa9cbacc89c9156eeaa5f6d349969ab2c98a519c
-
SHA512
b8f6483889cd8db2807a82863b33c56c7bafb2e5f7716e4c043b27767cc8615d3f2cc4cc57162ed1e958511bb8cb7313b95d443a67330ed79a47b3240eaf023c
-
SSDEEP
768:fwo9n6hfJdFGVj40BfDHrgnfDIUe7kMOFzb2:fodFGVc0VDLgrIUekM9
Malware Config
Signatures
Files
-
fbbedba5fe8f044339b75a29aa9cbacc89c9156eeaa5f6d349969ab2c98a519c.exe windows x86
8ddabe09013d22c64f62d7335eb364d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord573
ord685
ord100
ord616
ord617
ord618
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ldata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE