Static task
static1
Behavioral task
behavioral1
Sample
81b9163a803242c319084113da2f0749aaf5704e398d13b8e977755fb4f0d84d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
81b9163a803242c319084113da2f0749aaf5704e398d13b8e977755fb4f0d84d.exe
Resource
win10v2004-20220901-en
General
-
Target
81b9163a803242c319084113da2f0749aaf5704e398d13b8e977755fb4f0d84d
-
Size
236KB
-
MD5
bae31892fac6e6c3284b224af37f871e
-
SHA1
8c14ae7490bb3eaacc4b26dec1ff95435aa161b0
-
SHA256
81b9163a803242c319084113da2f0749aaf5704e398d13b8e977755fb4f0d84d
-
SHA512
27c77ae22ebe000d5b93cf830776d8f2127eabac5783ef3db8095068873af9d02076ad6a95966da62cf9366206f86abdecccb0a71f893a39e20088b113866e15
-
SSDEEP
6144:R/Yj/PmFFpKGo9/BSQDb8SxOIHyjsWOix1246E50zU1:R/YrPmFFpzq/BSE8vIHA124aU1
Malware Config
Signatures
Files
-
81b9163a803242c319084113da2f0749aaf5704e398d13b8e977755fb4f0d84d.exe windows x86
36a2f66abea494aae1b6d90421818d5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
__vbaVarTstGt
__vbaVarSub
__vbaStrI2
__vbaR8ForNextCheck
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
ord694
__vbaAryMove
ord587
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
ord696
__vbaPut3
ord697
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaPut4
EVENT_SINK_Invoke
__vbaRaiseEvent
ord621
__vbaNextEachVar
__vbaFreeObjList
ord516
__vbaStrErrVarCopy
_adj_fprem1
ord518
__vbaRecAnsiToUni
ord550
__vbaStrCat
__vbaError
__vbaBoolErrVar
__vbaWriteFile
__vbaLsetFixstr
__vbaRecDestruct
__vbaSetSystemError
__vbaNameFile
__vbaLenBstrB
__vbaHresultCheckObj
__vbaVargVarCopy
__vbaLenVar
_adj_fdiv_m32
ord666
__vbaAryVar
Zombie_GetTypeInfo
__vbaAryDestruct
__vbaCyErrVar
__vbaLateMemSt
ord592
ord593
__vbaExitProc
__vbaVarForInit
ord300
ord594
__vbaFileCloseAll
__vbaCyAdd
__vbaOnError
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaFpR4
ord306
__vbaForEachCollVar
__vbaStrFixstr
__vbaFpR8
__vbaVargVar
__vbaBoolVarNull
_CIsin
__vbaErase
ord631
__vbaVarCmpGt
Sections
.text Size: 224KB - Virtual size: 223KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ