Static task
static1
Behavioral task
behavioral1
Sample
e777dec8449581453d3d71d168885579c3a97a2f904f7e6a78b09512a780db41.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e777dec8449581453d3d71d168885579c3a97a2f904f7e6a78b09512a780db41.exe
Resource
win10v2004-20221111-en
General
-
Target
e777dec8449581453d3d71d168885579c3a97a2f904f7e6a78b09512a780db41
-
Size
337KB
-
MD5
8807df5df8ca10de367f91bacf4ca1e3
-
SHA1
cce44d96d707e9d7e1e2a8ddc27a06780df80b4a
-
SHA256
e777dec8449581453d3d71d168885579c3a97a2f904f7e6a78b09512a780db41
-
SHA512
1dbb3c72324a7d8a2c2523701f8caecaf7a21f832424e217708c54e7f974d4ffc258aaf5a20dcc321ef69e6028adcedbaedf6b3a3baee5cebf51c703531bf6f7
-
SSDEEP
3072:YGEU0X8zxA/jELu6Z12bKL7sc0Amagj+0P5sSEJdQ7dKUkxcAsJf3IwidTG8Ruk5:Q8zKdjjBuhy7YxAIBaOc/y9a+
Malware Config
Signatures
Files
-
e777dec8449581453d3d71d168885579c3a97a2f904f7e6a78b09512a780db41.exe windows x86
73bc92f688c7884c664274f2be64011e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord300
ord595
ord303
ord599
ord306
ord309
ord631
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord100
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE