Static task
static1
Behavioral task
behavioral1
Sample
944aa114d8946648c81b029c6eca5f49d40b8585c14f4322550bc287961a3b2a.exe
Resource
win7-20221111-en
General
-
Target
944aa114d8946648c81b029c6eca5f49d40b8585c14f4322550bc287961a3b2a
-
Size
204KB
-
MD5
7b6ea0df8f69761a971aabe349f8aac5
-
SHA1
6744d878fbe95890af6cb43c348dc104ff9c1683
-
SHA256
944aa114d8946648c81b029c6eca5f49d40b8585c14f4322550bc287961a3b2a
-
SHA512
54dfb37c3842c0c669f7b897674861a6925d1aac42252d0518109b8ccaa110a2985a240cda0d14939024ec5769fc476840ae511c0bae9d851249715d3f56b3e8
-
SSDEEP
6144:olWclnqmStuxLirp0MEKzrUX3Uz6AZDW:funqmSBrp0MEKz/a
Malware Config
Signatures
Files
-
944aa114d8946648c81b029c6eca5f49d40b8585c14f4322550bc287961a3b2a.exe windows x86
c0685768363b5ea57673c600ec11574d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord537
ord644
ord685
ord100
ord616
ord617
ord581
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dem Size: 4KB - Virtual size: 4KB