Static task
static1
Behavioral task
behavioral1
Sample
d6cc3fe5252aef8a062fe7b0a1379a5cebc286c00dc24e1b95c99168e888fc7a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6cc3fe5252aef8a062fe7b0a1379a5cebc286c00dc24e1b95c99168e888fc7a.exe
Resource
win10v2004-20220901-en
General
-
Target
d6cc3fe5252aef8a062fe7b0a1379a5cebc286c00dc24e1b95c99168e888fc7a
-
Size
364KB
-
MD5
e3b21da24813604f123935febfdfaf74
-
SHA1
120b93870f6ac31e2d4bf3f56a175d68b9dbc12e
-
SHA256
d6cc3fe5252aef8a062fe7b0a1379a5cebc286c00dc24e1b95c99168e888fc7a
-
SHA512
a65c77eeeac6e9ee4164c7b0527003d546e71870262e2527f543394e7ac7fa2769f7710d3291d8543db4bb2368618f913d26b903fcded7d13862194ffe470040
-
SSDEEP
6144:s87jMcL1wC4xu/xRFizAcMzMmozXaR51jmH/:HxFeMazXcjmf
Malware Config
Signatures
Files
-
d6cc3fe5252aef8a062fe7b0a1379a5cebc286c00dc24e1b95c99168e888fc7a.exe windows x86
dc5ed6518320616a5bda1f08462ba9b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord626
ord598
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord537
ord645
ord570
ord571
ord576
ord100
ord617
ord619
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 252KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE