Static task
static1
Behavioral task
behavioral1
Sample
73395983121d6c9c998603411db9f445611294cf9c252a5f09a542125d85c312.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73395983121d6c9c998603411db9f445611294cf9c252a5f09a542125d85c312.exe
Resource
win10v2004-20220812-en
General
-
Target
73395983121d6c9c998603411db9f445611294cf9c252a5f09a542125d85c312
-
Size
64KB
-
MD5
5af8c529a1162e667dc66d703548d7d0
-
SHA1
70a8c5d607859a2c27ed71ce0f9e1b0c2447a529
-
SHA256
73395983121d6c9c998603411db9f445611294cf9c252a5f09a542125d85c312
-
SHA512
2c43f6a9e8efd5d74d987dc0145d9377c8b6f0267873444c11996b96f7ea6b72d9e26c5a974449092ef7831c53e1fb6e3832ef029112cc148a63b9495bbb200f
-
SSDEEP
768:ey6tzOWX67xGnZyIvgvc1K0VvZRtgvOUFJEGNXgON4aGtc+NO0:ettaWQxcy0sc15FZ3gvtai4a950
Malware Config
Signatures
Files
-
73395983121d6c9c998603411db9f445611294cf9c252a5f09a542125d85c312.exe windows x86
63a42e0b31129911d63e395e69c78f5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
ord187
MethCallEngine
EVENT_SINK_Invoke
ord517
ord519
Zombie_GetTypeInfo
ord591
ord594
ord595
ord598
ord306
ord307
ord631
ord709
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord674
Zombie_GetTypeInfoCount
ord677
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord531
ord318
ord717
ord319
ord534
ProcCallEngine
ord644
ord681
ord685
ord100
ord320
ord321
ord613
ord617
ord619
ord650
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ