Static task
static1
Behavioral task
behavioral1
Sample
9e79b659aa6ce17dd2dd4f1032a8460e9aed87c6e539c38e52fc00a75cb9ee0b.exe
Resource
win7-20220901-en
General
-
Target
9e79b659aa6ce17dd2dd4f1032a8460e9aed87c6e539c38e52fc00a75cb9ee0b
-
Size
136KB
-
MD5
1bde1bca9a397bb9b018af5001c5d1b4
-
SHA1
7a706f975df26b339d0110975bfedd715e997fd6
-
SHA256
9e79b659aa6ce17dd2dd4f1032a8460e9aed87c6e539c38e52fc00a75cb9ee0b
-
SHA512
acab0906497d9b7c90a649e91cb573e9faef33a9f3ac8085b2ae24f9963aec3c2c42516d9a42dc8c01f2439660ee0a7bfc94afe3b8d6ea8783e1b337385c3359
-
SSDEEP
1536:Hs3m7fT9iBVRPXeslCeaL23oNtA16KD2WyU8bKsnouy8WQAZ:HZ7fADRPXPCzrNqD2WyU8bloutW7
Malware Config
Signatures
Files
-
9e79b659aa6ce17dd2dd4f1032a8460e9aed87c6e539c38e52fc00a75cb9ee0b.exe windows x86
d0982250ddf207c86e93c6d9215e95ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
ord583
ord690
ord585
MethCallEngine
ord666
EVENT_SINK2_Release
ord598
ord520
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord648
ord572
ord573
EVENT_SINK2_AddRef
ord681
ord100
ord689
ord614
ord617
ord619
ord546
ord581
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ