Static task
static1
Behavioral task
behavioral1
Sample
TAPOUT~1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
TAPOUT~1.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
by-hila.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
by-hila.exe
Resource
win10v2004-20220812-en
General
-
Target
d0819220ede55eb3cad6de3b8d7979b3ca816f8533186b08ccdf77d296ea66f3
-
Size
233KB
-
MD5
9a22bc4be3d17849bca1936b20d33c8d
-
SHA1
eda5da1a7f5a6b8647990faa9092f2b555db8da2
-
SHA256
d0819220ede55eb3cad6de3b8d7979b3ca816f8533186b08ccdf77d296ea66f3
-
SHA512
fb8660834440d2d4c1b51821b3f570adb1ce0be7c05f58ede3626a6a5786526ee3f8a19d69b96de89149b9446e533ce4d5fa8243d7af7b40405912caadee782c
-
SSDEEP
6144:Q0xuTZIfs/7QNDwmRfDnIio9w/UuJOcz7C+/uF7:XwlcyOTKw5M6v/6
Malware Config
Signatures
Files
-
d0819220ede55eb3cad6de3b8d7979b3ca816f8533186b08ccdf77d296ea66f3.cab
-
TAPOUT~1.EXE.exe windows x86
4b3cb70803fdf6396556a81277c5c1a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord570
ord100
Sections
. Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
by-hila.exe.exe windows x86
0ae1068c03fd9d9fa54ab3cc82c5db24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord558
ord666
ord669
ord595
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord573
ord576
ord100
ord616
ord619
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ