Static task
static1
Behavioral task
behavioral1
Sample
1efd29b250036c9905b103beff0bd3f0c83e0f1a6295091ee1e60f245f292f7a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1efd29b250036c9905b103beff0bd3f0c83e0f1a6295091ee1e60f245f292f7a.exe
Resource
win10v2004-20220812-en
General
-
Target
1efd29b250036c9905b103beff0bd3f0c83e0f1a6295091ee1e60f245f292f7a
-
Size
418KB
-
MD5
665a4fa013378977d41e68d7c8979210
-
SHA1
6c6ba11dbee1aa910057b2b36ed543c5b9d0f143
-
SHA256
1efd29b250036c9905b103beff0bd3f0c83e0f1a6295091ee1e60f245f292f7a
-
SHA512
0edbca848ae34c18bbd29776e99d9dc3fbf50c16ce1fa9526fcb92dabbd09c9559fb9373d81f66f726253b620579324372446a44e6d5fb54f75dc42575823cca
-
SSDEEP
12288:z+Lw9afkx+W5IbSV03wGLHj08QRUGbWUmowsKwmIBH:cLMUGC41TH
Malware Config
Signatures
Files
-
1efd29b250036c9905b103beff0bd3f0c83e0f1a6295091ee1e60f245f292f7a.exe windows x86
517f2f2bc4692b96bef981605c0b3b7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
ord588
MethCallEngine
EVENT_SINK_Invoke
ord516
ord519
Zombie_GetTypeInfo
ord595
ord520
ord523
ord631
ord525
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord530
ord608
ord531
ord717
ord533
ProcCallEngine
ord537
ord644
ord645
ord646
ord648
ord571
ord572
ord681
ord685
ord578
ord100
ord616
ord617
ord618
ord619
ord650
ord581
Sections
.text Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ