Static task
static1
Behavioral task
behavioral1
Sample
9f4d9c80dcb95e39e7936355c9c78051353eb351f7ba966513a0e8d7b6331344.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f4d9c80dcb95e39e7936355c9c78051353eb351f7ba966513a0e8d7b6331344.exe
Resource
win10v2004-20221111-en
General
-
Target
9f4d9c80dcb95e39e7936355c9c78051353eb351f7ba966513a0e8d7b6331344
-
Size
664KB
-
MD5
371e4ebd50afd46e757254b1fdaa6af7
-
SHA1
2b19bd17f4f6288d9f504b734fb3f9237ba7bea9
-
SHA256
9f4d9c80dcb95e39e7936355c9c78051353eb351f7ba966513a0e8d7b6331344
-
SHA512
5ccf82017cb8cbf3fda8d652f9ed6981c07539c74be32d44364299c0b2ef5894766df65662bebd5ea3d7e90fbfaa9265c7ea5f5feb5de5e2c8139fc64e33aa2a
-
SSDEEP
3072:/d5WXpYI+538b8Hpd3cN+UQTvK96iCAn+hQn2ThLUcvLNI4KHk6iE8YjcoOsADlr:ODk6WYjcoOsADV
Malware Config
Signatures
Files
-
9f4d9c80dcb95e39e7936355c9c78051353eb351f7ba966513a0e8d7b6331344.exe windows x86
9b3f39da1a4f4b9e745bb546f0376970
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
_adj_fdivr_m16i
ord608
_allmul
__vbaUI1ErrVar
_CIsqrt
__vbaErase
__vbaAryConstruct2
_CIlog
ord665
__vbaUI1I2
__vbaFPException
__vbaFreeStr
__vbaStrCat
__vbaRecAnsiToUni
_adj_fprem1
ord632
__vbaVarDup
ord516
_CIexp
__vbaExceptHandler
__vbaRedim
ord696
__vbaVarZero
EVENT_SINK_Release
_adj_fdivr_m64
_adj_fpatan
_CIcos
__vbaUbound
_adj_fdiv_r
__vbaAryMove
ord628
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdivr_m32
_adj_fdivr_m32i
__vbaLenBstr
__vbaNew2
__vbaRecUniToAnsi
ord597
__vbaHresultCheckObj
__vbaVarVargNofree
__vbaLbound
__vbaAryDestruct
__vbaFreeVarList
__vbaFreeVar
__vbaVarCopy
__vbaLenBstrB
__vbaAryLock
__vbaFreeObj
_adj_fdiv_m16i
_adj_fptan
_adj_fdiv_m64
__vbaI4Var
ord599
__vbaErrorOverflow
__vbaFreeStrList
__vbaStrVarMove
__vbaVarCat
DllFunctionCall
__vbaChkstk
__vbaGenerateBoundsError
__vbaI4ErrVar
__vbaAryUnlock
ord644
EVENT_SINK_AddRef
_CIsin
_CIatan
_CItan
__vbaStrVarVal
__vbaStrToUnicode
__vbaCopyBytes
__vbaStrMove
EVENT_SINK_QueryInterface
ord100
__vbaAryCopy
__vbaStrToAnsi
__vbaVarMove
__vbaVarTstNe
ord681
__vbaSetSystemError
_adj_fprem
__vbaFreeObjList
__vbaStrCopy
Sections
.text Size: 644KB - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ