Static task
static1
Behavioral task
behavioral1
Sample
cda9a76d4080059697a8baa955818ccd4b7e5ec8b4ceb540cf34ab89845db269.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cda9a76d4080059697a8baa955818ccd4b7e5ec8b4ceb540cf34ab89845db269.exe
Resource
win10v2004-20220812-en
General
-
Target
cda9a76d4080059697a8baa955818ccd4b7e5ec8b4ceb540cf34ab89845db269
-
Size
71KB
-
MD5
73c32a50815ab688945372e093f25690
-
SHA1
2525f155bb7d2a750bbfd768d90261ce3dadc74d
-
SHA256
cda9a76d4080059697a8baa955818ccd4b7e5ec8b4ceb540cf34ab89845db269
-
SHA512
2585d0859f53d9a9d3ad8e19e142f403bcc4d6a8e39572f5840ede4b9ef0ba12b3128d098d69a64d474172f3019a15b93bcc7a91283895b03051e1a93193efbc
-
SSDEEP
768:qyFYsPiRGBcdi1BYM6D5Deefoo6QB1Q8JNqeMdwLw90MyKZOWoKkGrxW/jqSrYP5:fFBoPrDpC0N/s8w9tOx6kZrI1SO
Malware Config
Signatures
Files
-
cda9a76d4080059697a8baa955818ccd4b7e5ec8b4ceb540cf34ab89845db269.exe windows x86
668b90564a68c5a0016c3503c0042a77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord709
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord573
ord685
ord100
ord616
ord618
ord581
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc_0 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
���� Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE