Static task
static1
Behavioral task
behavioral1
Sample
BIOZOM~1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
BIOZOM~1.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
INVISI~1.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
INVISI~1.exe
Resource
win10v2004-20220812-en
General
-
Target
785b2d674295c6560ebdb7c12807bd0c682ec756265d23d47b55c8943f29a28a
-
Size
236KB
-
MD5
bf5ebd1dd90b54184f81da1ffb26666e
-
SHA1
116f3ac70f9c2abb47326a9b81b9e268bafd15fb
-
SHA256
785b2d674295c6560ebdb7c12807bd0c682ec756265d23d47b55c8943f29a28a
-
SHA512
cbaf24f1040c2e76b718e11a0867a181688011c041e76d01a3ba8bfa23a5f4472eb594b54ff8ac530939c9d6347e20e42677d08bb123d207f975a49c60d05e36
-
SSDEEP
6144:jkuFEis1kZKgCclzzfJ7vOjKRy3rc6ZFWg9a:j1mkQUzQjKI3rcTh
Malware Config
Signatures
Files
-
785b2d674295c6560ebdb7c12807bd0c682ec756265d23d47b55c8943f29a28a.cab
-
BIOZOM~1.EXE.exe windows x86
7ae232834ab1b119e139f1e2295e7458
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaFreeVar
__vbaLateIdCall
__vbaStrVarMove
__vbaLenBstr
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaExitProc
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaVarIndexLoad
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaVarTstEq
__vbaI2I4
__vbaCastObjVar
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
__vbaFpI2
ord617
_CIatan
__vbaStrMove
_allmul
__vbaLateIdSt
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
ord581
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
INVISI~1.EXE.exe windows x86
d1e485966deb435104d3a0c2966fe56d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord641
ord656
ord800
ord2514
ord2621
ord5265
ord4376
ord4853
ord4998
ord6052
ord1775
ord5280
ord4425
ord3597
ord6055
ord4078
ord1776
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5290
ord3262
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord3402
ord4627
ord3610
ord1146
ord1168
ord860
ord540
ord567
ord324
ord2370
ord2302
ord4234
ord4710
ord2379
ord755
ord470
ord1200
ord537
ord926
ord2645
ord924
ord2818
ord6334
ord823
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord3798
ord4673
ord1576
msvcrt
_except_handler3
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_mbsstr
malloc
free
calloc
fopen
fwrite
fclose
remove
__CxxFrameHandler
_setmbcp
__set_app_type
kernel32
GetModuleFileNameA
LoadResource
FindResourceA
GetTempPathA
SetFilePointer
CreateFileA
CloseHandle
ReadFile
SystemTimeToFileTime
GetCurrentDirectoryA
LocalFileTimeToFileTime
CreateDirectoryA
SetFileTime
WriteFile
GetModuleHandleA
GetStartupInfoA
LockResource
user32
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
LoadIconA
SendMessageA
shell32
ShellExecuteA
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ