Static task
static1
Behavioral task
behavioral1
Sample
d5871a3896c97c1b2cdf0f1234fa494d3aeb336a91a3bdd84969074cb37a6ec5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5871a3896c97c1b2cdf0f1234fa494d3aeb336a91a3bdd84969074cb37a6ec5.exe
Resource
win10v2004-20221111-en
General
-
Target
d5871a3896c97c1b2cdf0f1234fa494d3aeb336a91a3bdd84969074cb37a6ec5
-
Size
56KB
-
MD5
5b326213563d08914a754749d2e1fa53
-
SHA1
3c3ffd82f6e5b3b8e55df9c8da5a74457682db00
-
SHA256
d5871a3896c97c1b2cdf0f1234fa494d3aeb336a91a3bdd84969074cb37a6ec5
-
SHA512
93ba2196f351026297133e4523511812014ee7c741dea4b4c670a9142fe30c6075e6cc357973e695fb72511369c614377699cbae400e57a9fdc965dbc29a9124
-
SSDEEP
768:C0CUtPgUp9iOd492vGV4b/Z9E9SqtWr7aS:PCCPgUTNvvGV4DZ9jcW5
Malware Config
Signatures
Files
-
d5871a3896c97c1b2cdf0f1234fa494d3aeb336a91a3bdd84969074cb37a6ec5.exe windows x86
a39604757b0f7d602998edc71a17f26b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord593
ord595
ord522
ord631
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord645
ord570
ord648
ord681
ord100
ord617
ord619
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ