Static task
static1
Behavioral task
behavioral1
Sample
959936cdd0286b5f7f9a199d7f5a2768bfd7eb025da3ac53d744c0410bf34156.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
959936cdd0286b5f7f9a199d7f5a2768bfd7eb025da3ac53d744c0410bf34156.exe
Resource
win10v2004-20220812-en
General
-
Target
959936cdd0286b5f7f9a199d7f5a2768bfd7eb025da3ac53d744c0410bf34156
-
Size
56KB
-
MD5
e1d1edc02b0c6d70c01385cfb13286f4
-
SHA1
f44228210c3581b25acc69db2e84dbf235a0c60b
-
SHA256
959936cdd0286b5f7f9a199d7f5a2768bfd7eb025da3ac53d744c0410bf34156
-
SHA512
34e0cbf7a79566d1a08608acae3edb3c7cf70ac9d5089ca598484ced899afc1ee607e81f11c9629fee83e96cb968ed3f97d089174f8b932536b3e7cdd5eb114a
-
SSDEEP
768:kHSc7Mus23YOFOyetQDhzVQls2iQdcrhfrm/auvPbDZVGPOmOwVOKnwD+R3:0SoV3Yry6UeCtC8NWeOnwAH
Malware Config
Signatures
Files
-
959936cdd0286b5f7f9a199d7f5a2768bfd7eb025da3ac53d744c0410bf34156.exe windows x86
dcb16906cb93db56486141110d461ec0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
pstorec
PStoreCreateInstance
msvbvm60
MethCallEngine
ord516
ord518
ord666
ord667
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord571
ord572
ord100
ord616
ord617
ord619
ord581
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ