Static task
static1
Behavioral task
behavioral1
Sample
b211872b51d6e225115226b6badbc5716903bb63291e7c8185f9a729c38658a1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b211872b51d6e225115226b6badbc5716903bb63291e7c8185f9a729c38658a1.exe
Resource
win10v2004-20220812-en
General
-
Target
b211872b51d6e225115226b6badbc5716903bb63291e7c8185f9a729c38658a1
-
Size
52KB
-
MD5
3b34f56c0662366f90a57c6ec3768463
-
SHA1
21354fef03459f51d3f3c0cfc28f8d930064fe2f
-
SHA256
b211872b51d6e225115226b6badbc5716903bb63291e7c8185f9a729c38658a1
-
SHA512
eeec6657718a601c193481a1fac1544653595da7aabea9038b61ad97d6b8a3781b7374a541661bfa6ff89e0cf084b1f5e07719a51d7b63795f0c3e112706ef77
-
SSDEEP
768:iKstPiovDB1O+QPVnlZ3KfUKaBqryv6BqGQcsAIrijJOVosnXd:KtJ4VnlZ3uUKkqryyB6AI2lOysN
Malware Config
Signatures
Files
-
b211872b51d6e225115226b6badbc5716903bb63291e7c8185f9a729c38658a1.exe windows x86
d9a386bf361096f770b4218ca875b01d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord593
ord594
ord595
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord573
ord685
ord100
ord618
ord581
Sections
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.&LsLZ�: Size: 16KB - Virtual size: 4KB
.mBu6C0 Size: 4KB - Virtual size: 4KB