Static task
static1
Behavioral task
behavioral1
Sample
6590e8aaa172efafe583b112f02cc955bf6c39e44f4e27c605666418c4103c0b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6590e8aaa172efafe583b112f02cc955bf6c39e44f4e27c605666418c4103c0b.exe
Resource
win10v2004-20220812-en
General
-
Target
6590e8aaa172efafe583b112f02cc955bf6c39e44f4e27c605666418c4103c0b
-
Size
204KB
-
MD5
0b472403d01f1318cf99f1b9be8dfcc6
-
SHA1
4d0fd47d14318e595a23ff3bd290e0d2ad1684a6
-
SHA256
6590e8aaa172efafe583b112f02cc955bf6c39e44f4e27c605666418c4103c0b
-
SHA512
622e40501121e556efd9ec4d6ae06ca839b6cb5517b231499d123916b9cd4eda0eff9f5c9190c4a3db0657e4099711aebe9567e18053a1ac3c55bc8887acc491
-
SSDEEP
3072:/17oEHrpzGcqm8PK7d0cj/pTllGEVaOSsNQPK2zuKKg6DT0S9+0d0r6FVpeZyIel:tr7YPK2cj/x5dDTz9+I0ea
Malware Config
Signatures
Files
-
6590e8aaa172efafe583b112f02cc955bf6c39e44f4e27c605666418c4103c0b.exe windows x86
5e71866f0552e489384a7e75bed9e13b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
ord690
ord187
ord698
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord518
ord519
ord557
ord558
Zombie_GetTypeInfo
ord669
ord300
ord595
ord598
ord305
ord306
ord520
ord307
ord631
EVENT_SINK_AddRef
ord527
ord562
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord313
ord712
ord606
ord318
ord717
ord319
ord534
ProcCallEngine
ord535
ord536
ord644
ord645
ord681
ord685
ord578
ord100
ord689
ord320
ord321
ord616
ord617
ord618
ord619
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ