Static task
static1
Behavioral task
behavioral1
Sample
10455f05f96b49e5a0a309bcd5da705478ceaf01a70d51147a3022f86e89e79a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
10455f05f96b49e5a0a309bcd5da705478ceaf01a70d51147a3022f86e89e79a.exe
Resource
win10v2004-20221111-en
General
-
Target
10455f05f96b49e5a0a309bcd5da705478ceaf01a70d51147a3022f86e89e79a
-
Size
336KB
-
MD5
34d166aa7149baf35a3db0c65ef03a10
-
SHA1
be5789ab68df888dbb348b0f57dcb8ee004ea91c
-
SHA256
10455f05f96b49e5a0a309bcd5da705478ceaf01a70d51147a3022f86e89e79a
-
SHA512
338bdddafbabaa67767404dddc3dc84005468d33e2b106bb57cb0c8bcc841655e3154062997853f4a4d36e29b123a4b055b52485765f2de83ef39b16f7532a91
-
SSDEEP
6144:qlPwFPQYSphbTYSphbQCqzPqyTZaEbcuWxh3zz1WEkRepiz8s4+:fhSphbcSphbQthTFbKhDaepY4+
Malware Config
Signatures
Files
-
10455f05f96b49e5a0a309bcd5da705478ceaf01a70d51147a3022f86e89e79a.exe windows x86
208cc4b531d769600498e496e46d38a1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
Zombie_GetTypeInfo
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ord644
ord685
ord100
ord617
ord619
ord581
Sections
.text Size: 188KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ