Static task
static1
Behavioral task
behavioral1
Sample
ccf8570f8cc95e0c5c12ed9625bf62b39ade884e4a89153bccd0c8f1254bb696.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ccf8570f8cc95e0c5c12ed9625bf62b39ade884e4a89153bccd0c8f1254bb696.exe
Resource
win10v2004-20220812-en
General
-
Target
ccf8570f8cc95e0c5c12ed9625bf62b39ade884e4a89153bccd0c8f1254bb696
-
Size
488KB
-
MD5
31849732db31402c9bad435cf3941af9
-
SHA1
b9520c2470d2a32dc5e78ba377fb924d871fb43f
-
SHA256
ccf8570f8cc95e0c5c12ed9625bf62b39ade884e4a89153bccd0c8f1254bb696
-
SHA512
a6001db3badf6fdc35a5b0f7b14793946aa00a5c1c1a3e3631b06e5b12bd957f4017b746c47cbca4803100a3de5eac872f3870907ff16a8f7da1b7be9a243ed4
-
SSDEEP
12288:LoVfwss338SEFjzWnt/nZPeG582RKL23JRpOcTEfFjrBIPS1xtuq:bEFjzWnt/nZP382RZXAVaPSP
Malware Config
Signatures
Files
-
ccf8570f8cc95e0c5c12ed9625bf62b39ade884e4a89153bccd0c8f1254bb696.exe windows x86
45292ab832e08f238a17d57c1c0bd314
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord583
ord588
ord697
ord698
MethCallEngine
ord553
ord661
ord662
ord595
ord303
ord598
ord703
ord704
ord705
ord309
ord709
EVENT_SINK_AddRef
DllFunctionCall
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord648
ord682
ord575
ord683
ord685
ord100
ord610
ord611
ord612
ord540
ord541
ord544
ord546
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 460KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ