Static task
static1
Behavioral task
behavioral1
Sample
ff88993a16819a817ecbb6111473d0e1dde01a76de67445e5c4743c400900e48.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ff88993a16819a817ecbb6111473d0e1dde01a76de67445e5c4743c400900e48.exe
Resource
win10v2004-20220812-en
General
-
Target
ff88993a16819a817ecbb6111473d0e1dde01a76de67445e5c4743c400900e48
-
Size
1.1MB
-
MD5
6615e1df360347ae4cce97180f9abd7b
-
SHA1
6419dab1d56fcfa8e5b570b951e999883f0713e0
-
SHA256
ff88993a16819a817ecbb6111473d0e1dde01a76de67445e5c4743c400900e48
-
SHA512
cd494243c366029fa1dfbe2c95e66d5e081ffefdabea7d3d6d0fdccb5da62d759a2d696b4f6494321c2fc8d305872f32c89a98791cbd8d159e705aa19b70541f
-
SSDEEP
6144:fXVW9H+pFtacVMM1wLP7NK8iBZ8LfeHa+z7SrwSrk6WjCUbcUb0kQqWXVWAh:NWaermFXRQqwW
Malware Config
Signatures
Files
-
ff88993a16819a817ecbb6111473d0e1dde01a76de67445e5c4743c400900e48.exe windows x86
299617dbbba3dac7ca80fb1d9c58381c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord666
ord593
ord594
ord599
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord716
ProcCallEngine
ord645
ord100
ord616
ord617
ord542
ord543
ord545
ord546
ord580
Sections
.text Size: 940KB - Virtual size: 940KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE