Static task
static1
Behavioral task
behavioral1
Sample
b30419c8553f35ffb7e7dff1f79311b3ede66f219718991d1873ca5efca8de54.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b30419c8553f35ffb7e7dff1f79311b3ede66f219718991d1873ca5efca8de54.exe
Resource
win10v2004-20221111-en
General
-
Target
b30419c8553f35ffb7e7dff1f79311b3ede66f219718991d1873ca5efca8de54
-
Size
380KB
-
MD5
dc83971bfc7e872028489c513ac9afde
-
SHA1
814c4a6708fdc2b8dea13f3aef23f403bd57e5c0
-
SHA256
b30419c8553f35ffb7e7dff1f79311b3ede66f219718991d1873ca5efca8de54
-
SHA512
556226012826be875b4b8d9acb799c13a597090f2ae1989700c1ebe066b256d4de7f3b033249cb0077d86826fd060bc29edad97d4ce5b816aed3ac0e9e35c8ae
-
SSDEEP
6144:WqgOzT26JaZa0uNzGIHW9M2fO8W9/yh9qJ3YuVxSQ9gi1yiu:WqgOGsiUHWiV19/yh9qJ3Y4xSQT
Malware Config
Signatures
Files
-
b30419c8553f35ffb7e7dff1f79311b3ede66f219718991d1873ca5efca8de54.exe windows x86
901b3bf40def7b5232fba69391476b4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
ord583
ord585
ord695
ord588
MethCallEngine
ord516
ord519
ord558
ord593
ord300
ord595
ord596
ord303
ord598
ord305
ord306
ord705
ord520
ord309
ord709
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
ord560
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord313
ord712
ord608
ord531
ord717
ProcCallEngine
ord645
ord570
ord648
ord573
ord681
ord576
ord685
ord100
ord579
ord610
ord612
ord613
ord616
ord617
ord618
ord619
ord544
ord546
ord581
Sections
.text Size: 368KB - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE