Static task
static1
Behavioral task
behavioral1
Sample
e58e9bb6f5687f31cca25645261a503cbc37bcf9bbd57cc2fa0d6a497e5a74bb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e58e9bb6f5687f31cca25645261a503cbc37bcf9bbd57cc2fa0d6a497e5a74bb.exe
Resource
win10v2004-20221111-en
General
-
Target
e58e9bb6f5687f31cca25645261a503cbc37bcf9bbd57cc2fa0d6a497e5a74bb
-
Size
40KB
-
MD5
1b6cc0c26a03770dc4e453a30d4a2120
-
SHA1
391e91ef6c47ec08ff2c6b54d1427927e1d963e0
-
SHA256
e58e9bb6f5687f31cca25645261a503cbc37bcf9bbd57cc2fa0d6a497e5a74bb
-
SHA512
885e54e46ad8f8e20ad246a0b43e536f9716a287eb67991b7b00fe30ef4d3b6d86090d801a1f4e838430e31825e8ee8b1bf4dab4cd896f6381b48e53c7988759
-
SSDEEP
768:2RrGuBfn+VE1AMbjliXIfxpxbMdgP4o4GEnLjFCitom:2RrGO+aX4Yfxp1MdgARFD
Malware Config
Signatures
Files
-
e58e9bb6f5687f31cca25645261a503cbc37bcf9bbd57cc2fa0d6a497e5a74bb.exe windows x86
ed386606ce4d607aa8fb494574360765
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
netshell
DllCanUnloadNow
msvbvm60
ord587
ord589
MethCallEngine
ord522
EVENT_SINK_AddRef
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord575
ord100
ord432
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ