Static task
static1
Behavioral task
behavioral1
Sample
fb60edc49208a65efaf2f2181bff815b2ae981182c3bd2ba7567f60fdb9222fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fb60edc49208a65efaf2f2181bff815b2ae981182c3bd2ba7567f60fdb9222fb.exe
Resource
win10v2004-20221111-en
General
-
Target
fb60edc49208a65efaf2f2181bff815b2ae981182c3bd2ba7567f60fdb9222fb
-
Size
132KB
-
MD5
7172d05e8bf8def4001a451a8d219a18
-
SHA1
330c5e9a52f36c815b9007279f15879530dcb9a9
-
SHA256
fb60edc49208a65efaf2f2181bff815b2ae981182c3bd2ba7567f60fdb9222fb
-
SHA512
1b1efff0a958812375eddd1ae605a439f6c8f030d1ce4fc5be736f5457bddb7196aea30a7ab21488d71805011f1406a6eb83d95086c59d3a27e104dd9abbb4b9
-
SSDEEP
3072:tWpAt9PBiwzARFRPr4XFC8ZJotI2uGZW4:serBiwwFmPCaG8
Malware Config
Signatures
Files
-
fb60edc49208a65efaf2f2181bff815b2ae981182c3bd2ba7567f60fdb9222fb.exe windows x86
e33f1e423a585fb51b8e5a85334f8a56
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord592
ord595
ord598
ord520
ord631
ord632
ord525
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ord319
ProcCallEngine
ord535
ord644
ord537
ord576
ord685
ord100
ord320
ord321
ord616
ord617
ord619
ord580
ord581
Sections
.text Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ