Static task
static1
Behavioral task
behavioral1
Sample
86f009d9e85d5361aea11e5a97735c85186cebde5824af2636d946299776b6ff.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
86f009d9e85d5361aea11e5a97735c85186cebde5824af2636d946299776b6ff.exe
Resource
win10v2004-20220812-en
General
-
Target
86f009d9e85d5361aea11e5a97735c85186cebde5824af2636d946299776b6ff
-
Size
180KB
-
MD5
a249caea6c7a8cfc67b28f5defdcc206
-
SHA1
f3fc8d75926e8ca84a407a9218edf1360affcb73
-
SHA256
86f009d9e85d5361aea11e5a97735c85186cebde5824af2636d946299776b6ff
-
SHA512
4dae5af53f9bb7fd515a5204fc392d838472e81144c43f9fb65222df84005ea0d9b93fd392469e1340918c701cf0eda43143771082ab1c81ed510a94c15b0efb
-
SSDEEP
1536:H4oUFn4hpBTOJqd4mDT9Q+IMCTvIDw6ooOMP5xLZztkZ+lhuot6Ar:x9d/RCDMIQXOUxFJi+2otn
Malware Config
Signatures
Files
-
86f009d9e85d5361aea11e5a97735c85186cebde5824af2636d946299776b6ff.exe windows x86
94383e828ababf6d7a018e54278f7b74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaAryMove
__vbaLenBstr
__vbaStrVarMove
__vbaEnd
__vbaPut3
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
rtcAnsiValueBstr
_adj_fprem1
rtcLowerCaseVar
__vbaRecAnsiToUni
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
rtcEnvironBstr
__vbaAryDestruct
__vbaVarForInit
__vbaStrLike
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
rtcDoEvents
_CIsin
rtcSpaceBstr
rtcMidCharVar
__vbaChkstk
rtcSpaceVar
__vbaFileClose
rtcUpperCaseVar
__vbaGenerateBoundsError
__vbaGet3
__vbaStrCmp
__vbaAryConstruct2
__vbaObjVar
DllFunctionCall
_adj_fpatan
__vbaFixstrConstruct
__vbaRecUniToAnsi
rtcShell
__vbaUI1I2
_CIsqrt
__vbaExceptHandler
rtcSplit
__vbaStrToUnicode
rtcStrReverse
_adj_fprem
_adj_fdivr_m64
rtcVarBstrFromAnsi
rtcCreateObject2
__vbaFPException
__vbaInStrVar
rtcStrConvVar2
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaVarLateMemCallLdRf
__vbaNew2
__vbaVar2Vec
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
rtcImmediateIf
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ThunRTMain
__vbaVarSetVar
__vbaI4Var
__vbaAryLock
__vbaVarAdd
__vbaStrToAnsi
__vbaVarMod
__vbaVarLateMemCallLd
__vbaFpI4
__vbaVarCopy
rtcLeftCharBstr
__vbaLateMemCallLd
_CIatan
__vbaAryCopy
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaFreeObj
__vbaFreeStr
Sections
0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.de0YY Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.����4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ