Static task
static1
Behavioral task
behavioral1
Sample
8c7c4b0e40e6eba0223b510b66334fa29a9a12ab54d9e7cc8e9901fe45b4c934.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8c7c4b0e40e6eba0223b510b66334fa29a9a12ab54d9e7cc8e9901fe45b4c934.exe
Resource
win10v2004-20220812-en
General
-
Target
8c7c4b0e40e6eba0223b510b66334fa29a9a12ab54d9e7cc8e9901fe45b4c934
-
Size
70KB
-
MD5
654990a317a209940d8b5f2e6e67f9a8
-
SHA1
0b783ed9dcb9aa57bbd527b7f5d4626c1ef9c602
-
SHA256
8c7c4b0e40e6eba0223b510b66334fa29a9a12ab54d9e7cc8e9901fe45b4c934
-
SHA512
14db2811dee43a6ba6dc1ddf7cd4e8d2fb11a8a9da4c8eaf7119efbfdf0155d8527d05908789ef1ee60754b0a540f04bc7eb2bb75b6623dca24a3b510c5dde68
-
SSDEEP
768:DyziYJD0LF7o+01HYkVd82Dd4uHK/J2a+nlTP3lERBuHBXe+U2/:F7F4HNVph4uHK/0a+3ELUuY/
Malware Config
Signatures
Files
-
8c7c4b0e40e6eba0223b510b66334fa29a9a12ab54d9e7cc8e9901fe45b4c934.exe windows x86
6184c5724d31e7838c6329fc9247b597
Code Sign
01Certificate
IssuerO=Internet Widgits Pty Ltd,ST=DS,C=SANot Before13/04/2012, 23:04Not After13/04/2014, 23:04SubjectO=Internet Widgits Pty Ltd,ST=AS,C=FScd:11:fb:de:d1:d5:d2:b1:b9:e2:99:95:0d:a3:5d:70:26:16:df:eaSigner
Actual PE Digestcd:11:fb:de:d1:d5:d2:b1:b9:e2:99:95:0d:a3:5d:70:26:16:df:eaDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateO=Internet Widgits Pty Ltd,ST=AS,C=FS15/09/2022, 14:52 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
ord588
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
ord595
_adj_fdiv_m16i
ord702
_adj_fdivr_m16i
_CIsin
ord631
ord525
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaErrorOverflow
ord648
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
ord687
ord612
__vbaVarDup
_CIatan
__vbaStrMove
ord618
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ