Static task
static1
Behavioral task
behavioral1
Sample
4e825a17c18a03c170a85729314978a107461231bba45d3349ba211479cec2e8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4e825a17c18a03c170a85729314978a107461231bba45d3349ba211479cec2e8.exe
Resource
win10v2004-20221111-en
General
-
Target
4e825a17c18a03c170a85729314978a107461231bba45d3349ba211479cec2e8
-
Size
360KB
-
MD5
aa30fd8ba522ebbfda57d9c0a6e2bdfe
-
SHA1
6c41c8c16dc7e6bf5dc186ec37efffa36fc0ce31
-
SHA256
4e825a17c18a03c170a85729314978a107461231bba45d3349ba211479cec2e8
-
SHA512
1bc4b4afa63cee2204f23d91f48a429f5063b68f8795a8a79256308308a69b51835bed9c3b7c6817d76a529f548a9a374b3f977214e3ac02f71745f89f72423a
-
SSDEEP
3072:pb1U6RwHAi3pX3MMiPXZJ0fA/8L9NFdhzbzpQxi/Fz+zyfyiwiz9HNvgr:R1fPZmS23Fdhfzpsi/Fz+zstwiz5N
Malware Config
Signatures
Files
-
4e825a17c18a03c170a85729314978a107461231bba45d3349ba211479cec2e8.exe windows x86
146616024364149ad7de34df03f113ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
ord690
MethCallEngine
EVENT_SINK_Invoke
Zombie_GetTypeInfo
ord591
ord595
ord305
ord631
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord313
ord608
ord717
ord319
ord534
ProcCallEngine
ord537
ord644
ord685
ord100
ord689
ord320
ord321
ord616
ord617
ord619
ord581
Sections
.text Size: 352KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ