Static task
static1
Behavioral task
behavioral1
Sample
d4001d903e107481e344bf6eedd2ff7b217a66925639f13e359c8eb287d0f7fa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4001d903e107481e344bf6eedd2ff7b217a66925639f13e359c8eb287d0f7fa.exe
Resource
win10v2004-20221111-en
General
-
Target
d4001d903e107481e344bf6eedd2ff7b217a66925639f13e359c8eb287d0f7fa
-
Size
31KB
-
MD5
8259dfed24171a721fc23a58082fc9e2
-
SHA1
04e4ef685e3df55c1221f4e54dfe16e469714cb3
-
SHA256
d4001d903e107481e344bf6eedd2ff7b217a66925639f13e359c8eb287d0f7fa
-
SHA512
15eada07ec98f63d4dfd2bda75fda37b64768c7bd571d12b9389090468c549ca93ca1619cbb9649b0b14fded96a3c45ecb2a287c667069edcf8a400efcd5ba7f
-
SSDEEP
384:NGQLlu7iunP5kg6pni5JhijNEd9D4RcsL2:NGQLlu7iunSg6pni5JYiV4RcsL
Malware Config
Signatures
Files
-
d4001d903e107481e344bf6eedd2ff7b217a66925639f13e359c8eb287d0f7fa.exe windows x86
c531f99f248a9e76a8e7715344f4f23d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
MethCallEngine
ord625
ord522
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100
ord613
ord617
ord619
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ