Static task
static1
Behavioral task
behavioral1
Sample
9ba93c85092dc40421ad38eea5e4105804ae161fc14bce0a1ad172841a6a9bd1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ba93c85092dc40421ad38eea5e4105804ae161fc14bce0a1ad172841a6a9bd1.exe
Resource
win10v2004-20221111-en
General
-
Target
9ba93c85092dc40421ad38eea5e4105804ae161fc14bce0a1ad172841a6a9bd1
-
Size
156KB
-
MD5
21c8ff619ca5d668b414ed3e9e65b818
-
SHA1
1b6ac8a3679e0f8a3a25f60016b0f7163f869aa7
-
SHA256
9ba93c85092dc40421ad38eea5e4105804ae161fc14bce0a1ad172841a6a9bd1
-
SHA512
a6f2f43056770abe0e5d5528dfc7174cb234724bac2271afea499eba4e39614a6e27a1e185c07153f48dea4dabab50d7caec109750a7cbf613fbbdc2d520be7e
-
SSDEEP
1536:FVFRTpAKgcX4ICTW/ZmI/9yjMkaSPoUrLs96ggT/aVA+BXqWH:3np9HiWcI/90MkZPsAyV5XJ
Malware Config
Signatures
Files
-
9ba93c85092dc40421ad38eea5e4105804ae161fc14bce0a1ad172841a6a9bd1.exe windows x86
7839ccf32f61f4b6726929929fab4d51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaStrI2
ord690
ord691
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
ord588
ord589
__vbaFreeVarList
ord697
__vbaPut3
_adj_fdiv_m64
__vbaPut4
ord512
ord515
_adj_fprem1
ord519
ord626
ord629
__vbaStrCat
ord553
__vbaSetSystemError
ord554
__vbaHresultCheckObj
ord555
ord556
ord558
_adj_fdiv_m32
ord559
__vbaAryDestruct
ord591
ord594
ord596
_adj_fdiv_m16i
ord597
ord702
__vbaObjSetAddref
_adj_fdivr_m16i
ord703
ord520
ord523
_CIsin
ord525
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
ord527
ord634
ord528
ord560
ord561
ord562
DllFunctionCall
ord672
_adj_fpatan
ord674
ord675
ord568
ord676
__vbaRedim
EVENT_SINK_Release
ord679
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord714
ord530
ord716
__vbaFPException
__vbaGetOwner3
ord534
__vbaDateVar
ord538
_CIlog
__vbaFileOpen
ord648
__vbaNew2
ord570
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
ord680
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
ord577
_adj_fdiv_r
ord578
ord100
ord687
__vbaI4Var
ord689
__vbaFpCy
__vbaVarDup
ord613
ord615
__vbaFpI4
ord616
ord617
_CIatan
__vbaStrMove
ord618
ord542
_allmul
_CItan
_CIexp
ord580
__vbaFreeStr
__vbaFreeObj
ord581
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ