Static task
static1
Behavioral task
behavioral1
Sample
4c471605d525687e29a1bb19c07edd98b694d486e339e3964cb8519317cf8a4a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4c471605d525687e29a1bb19c07edd98b694d486e339e3964cb8519317cf8a4a.exe
Resource
win10v2004-20221111-en
General
-
Target
4c471605d525687e29a1bb19c07edd98b694d486e339e3964cb8519317cf8a4a
-
Size
80KB
-
MD5
a7fc1c5af5a05432e5cb5d6bc0e7372a
-
SHA1
c33c7e5503146534199dc2e2e1a2cf27906b1ed1
-
SHA256
4c471605d525687e29a1bb19c07edd98b694d486e339e3964cb8519317cf8a4a
-
SHA512
81002cf4baefc6c7ae35b8a0ee538b4e3f5dda8f97d0e2eb5ed5991bc78ed5876d4550ac6f4413cc4afbcae61935b1bc924f69ca990def674d035040cf89567d
-
SSDEEP
1536:8S2+G6FCNhhXUlvAu6ipF9FUS2+G6FCNhh:75FCNhhXUyu5p1T5FCNhh
Malware Config
Signatures
Files
-
4c471605d525687e29a1bb19c07edd98b694d486e339e3964cb8519317cf8a4a.exe windows x86
7ffa8b98717ca797e82a49d3af0de34f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord629
ord666
ord591
ord593
ord594
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord528
ord529
ord560
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord716
ProcCallEngine
ord644
ord645
ord573
ord681
ord685
ord100
ord610
ord617
ord619
ord546
ord581
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ