Static task
static1
Behavioral task
behavioral1
Sample
b9a5269f49066d5e0a010caed047e13ae6d670fcb3623612bf2c08240e050049.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9a5269f49066d5e0a010caed047e13ae6d670fcb3623612bf2c08240e050049.exe
Resource
win10v2004-20220812-en
General
-
Target
b9a5269f49066d5e0a010caed047e13ae6d670fcb3623612bf2c08240e050049
-
Size
152KB
-
MD5
a37b0b209139ac28a0e35db81d2ad3c9
-
SHA1
02ed0d10e8e7ea6d443a0eb146bd559d992a69c6
-
SHA256
b9a5269f49066d5e0a010caed047e13ae6d670fcb3623612bf2c08240e050049
-
SHA512
70f9fbf9a6f8edde7c1f14f57255d00dcaf1db466f0533c00fe7aa8889bf71ecb2214b5c5442fd3f77f0168c1107015642df063e09186f937813fc1c08702cbc
-
SSDEEP
3072:Q73e3eqCLAVBZzPUTSuhUmkbc6CSRv/vTFCY3LAyGEu:pCLGPUTSuhULbc6CSRvXTFFc3E
Malware Config
Signatures
Files
-
b9a5269f49066d5e0a010caed047e13ae6d670fcb3623612bf2c08240e050049.exe windows x86
a03f08e027147f1f4d1fea8ded27b2fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
ord690
ord187
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord518
ord519
ord558
ord665
Zombie_GetTypeInfo
ord300
ord595
ord598
ord305
ord306
ord520
ord307
ord631
ord633
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord670
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord313
ord712
ord606
ord607
ord318
ord717
ord319
ord534
ProcCallEngine
ord535
ord536
ord644
ord645
ord571
ord681
ord685
ord578
ord100
ord689
ord320
ord321
ord616
ord617
ord618
ord619
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ