Static task
static1
Behavioral task
behavioral1
Sample
f872269df4a8b7155cdd92121c02d60d234bc2d075a4f3ee6225fdefcafabbc2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f872269df4a8b7155cdd92121c02d60d234bc2d075a4f3ee6225fdefcafabbc2.exe
Resource
win10v2004-20221111-en
General
-
Target
f872269df4a8b7155cdd92121c02d60d234bc2d075a4f3ee6225fdefcafabbc2
-
Size
220KB
-
MD5
925fec9752e7b616e8470bac7d931cc0
-
SHA1
4d7b0f08c0d533091a83251708826713aff5eb70
-
SHA256
f872269df4a8b7155cdd92121c02d60d234bc2d075a4f3ee6225fdefcafabbc2
-
SHA512
708f4920f376c848e87c98eb35e1b7ffc012ea20ff0cdad11dc17e67248183d9562e635ef197b07cfc74b16f7ad4087ead723f3a8eaaab95520208455e246256
-
SSDEEP
3072:t+yCmAH6LhtLDH/XHUUOR5pEPhXNyhFVJPGcPGE6WhBUrPmIKFE:t+yvAHitcPRTEZ9ydJPPeEdwrPm
Malware Config
Signatures
Files
-
f872269df4a8b7155cdd92121c02d60d234bc2d075a4f3ee6225fdefcafabbc2.exe windows x86
6bb610cfec8cf5b004e28a0a00716b4a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaAryMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaVarIdiv
_adj_fdiv_m64
ord516
_adj_fprem1
__vbaRecAnsiToUni
__vbaCopyBytes
__vbaResume
__vbaStrCat
__vbaVarCmpNe
__vbaRecDestruct
__vbaSetSystemError
_adj_fdiv_m32
__vbaVarCmpGe
__vbaAryDestruct
__vbaLateMemSt
ord593
__vbaVarPow
__vbaExitProc
ord594
__vbaStrLike
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
_CIsin
ord709
__vbaErase
ord631
__vbaVarZero
__vbaVarCmpGt
ord632
__vbaChkstk
__vbaFileClose
__vbaGenerateBoundsError
ord529
__vbaStrCmp
__vbaPutOwner3
__vbaAryConstruct2
__vbaObjVar
__vbaI2I4
DllFunctionCall
ord670
__vbaVarOr
_adj_fpatan
__vbaRedim
__vbaRecUniToAnsi
ord601
__vbaUI1I2
_CIsqrt
__vbaVarAnd
__vbaVarMul
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord607
__vbaVarDiv
ord608
ord716
__vbaVarCmpLe
__vbaFPException
ord717
__vbaStrVarVal
__vbaUbound
__vbaVarCat
ord535
ord644
_CIlog
__vbaErrorOverflow
__vbaFileOpen
ord648
__vbaInStr
__vbaVar2Vec
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
__vbaVarCmpLt
__vbaDerefAry1
_adj_fdivr_m32
__vbaPowerR8
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarCmpEq
__vbaAryLock
__vbaVarAdd
__vbaVarMod
__vbaFpI4
__vbaVarCopy
ord617
__vbaLateMemCallLd
_CIatan
__vbaAryCopy
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaI4ErrVar
__vbaFreeObj
__vbaFreeStr
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ