Static task
static1
Behavioral task
behavioral1
Sample
8dd8f06e021393817bcd9368eddd3e13804e5c232457e4aacbcb0933a6c706ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8dd8f06e021393817bcd9368eddd3e13804e5c232457e4aacbcb0933a6c706ca.exe
Resource
win10v2004-20221111-en
General
-
Target
8dd8f06e021393817bcd9368eddd3e13804e5c232457e4aacbcb0933a6c706ca
-
Size
99KB
-
MD5
1b09387b1f29aa63464c2b9507d0908c
-
SHA1
cf3aa7a49c9c28ec02dd2ad7b91e01cf7ce4b20f
-
SHA256
8dd8f06e021393817bcd9368eddd3e13804e5c232457e4aacbcb0933a6c706ca
-
SHA512
ac801eab0e91ada7e4091c364a2bc05657087a55fab7d3667f2c6adfbbd57861cba9a419bec1db013abc2959f82db254429f742679352aa7cb327af6f3fdb28a
-
SSDEEP
1536:pkp3sg6K8G1BlQywaauWsWwOG5u/MezLND39lCLh:E3sg6K8GOyAwd5u/NztCF
Malware Config
Signatures
Files
-
8dd8f06e021393817bcd9368eddd3e13804e5c232457e4aacbcb0933a6c706ca.exe windows x86
82e3cb84a9bd45ec57373531f3cced7f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
kernel32
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
msvbvm60
EVENT_SINK_GetIDsOfNames
ord693
ord694
ord698
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord592
ord593
ord594
ord595
ord598
ord520
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord606
ord714
ord608
ord717
ord319
ProcCallEngine
ord537
ord644
ord570
ord573
ord681
ord685
ord100
ord320
ord321
ord616
ord617
ord618
ord650
ord546
ord580
ord581
Sections
.text Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ