Static task
static1
Behavioral task
behavioral1
Sample
5b6610379c1f06cb89307502f9a5a481dc67622146f902345f60db0ca708adc3.exe
Resource
win7-20220812-en
General
-
Target
5b6610379c1f06cb89307502f9a5a481dc67622146f902345f60db0ca708adc3
-
Size
968KB
-
MD5
2745ff290f911865a5451f5d726fefac
-
SHA1
cebcf4314b61e6f3e13a960eb12d7075e0a0fe6d
-
SHA256
5b6610379c1f06cb89307502f9a5a481dc67622146f902345f60db0ca708adc3
-
SHA512
0c8398652c620876f7622f9425b9dd3f218351aa65a34e96866c495462d28ec0f5ddd5f46ab2d512bbb6e4c9dd87164cf110f8eaa59a9cac873849cfdde0b6d2
-
SSDEEP
24576:K3T6pi2qOpLh79Hlb8UbRV938Aa5HYvDy2WZqdRjHnAIMtZ54Lr3rmyu9GW2f2nh:oIZ9Fb8UM5HYvDy2WZqdRjHnAIMtZ54C
Malware Config
Signatures
Files
-
5b6610379c1f06cb89307502f9a5a481dc67622146f902345f60db0ca708adc3.exe windows x86
0c85dabd470976e6c05371d915a77117
Code Sign
01Certificate
IssuerCN=Siliconic software (R) 2014,O=Insulation siliconic corporation (R) 2014,C=USNot Before24-03-2019 20:43Not After23-03-2022 20:43SubjectCN=Siliconic software (R) 2014,O=Insulation siliconic corporation (R) 2014,C=US4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before31-12-2015 00:00Not After09-07-2019 18:40SubjectCN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
04:c2:0f:c4:a5:95:93:b5:6a:bf:04:f3:b5:25:10:16:f0:3f:c1:c6:8c:5f:92:f8:1c:75:05:fd:2e:5c:4e:05Signer
Actual PE Digest04:c2:0f:c4:a5:95:93:b5:6a:bf:04:f3:b5:25:10:16:f0:3f:c1:c6:8c:5f:92:f8:1c:75:05:fd:2e:5c:4e:05Digest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Siliconic software (R) 2014,O=Insulation siliconic corporation (R) 2014,C=US24-03-2019 22:23 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaLateIdCall
ord697
__vbaFreeVarList
_adj_fdiv_m64
ord516
_adj_fprem1
ord519
__vbaStrCat
__vbaSetSystemError
__vbaRecDestruct
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaVarForInit
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
_CIsin
ord525
__vbaChkstk
ord526
__vbaFileClose
EVENT_SINK_AddRef
__vbaStrCmp
__vbaAryConstruct2
__vbaVarTstEq
__vbaCyI4
__vbaI2I4
DllFunctionCall
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaInStr
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaI4Var
ord616
_CIatan
__vbaStrMove
__vbaCastObj
__vbaI4Cy
_allmul
_CItan
__vbaVarForNext
_CIexp
__vbaFreeStr
__vbaFreeObj
Sections
.text Size: 920KB - Virtual size: 919KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ