Static task
static1
Behavioral task
behavioral1
Sample
c296f67a2e8d7091bdce72a877f59acaa0719801615b1e5aef97181c0f85d623.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c296f67a2e8d7091bdce72a877f59acaa0719801615b1e5aef97181c0f85d623.exe
Resource
win10v2004-20221111-en
General
-
Target
c296f67a2e8d7091bdce72a877f59acaa0719801615b1e5aef97181c0f85d623
-
Size
152KB
-
MD5
dcb72cdc59537008379253af95dbb0b3
-
SHA1
134133bbb3abb0eea5e64591f70627144c236580
-
SHA256
c296f67a2e8d7091bdce72a877f59acaa0719801615b1e5aef97181c0f85d623
-
SHA512
29344ee0e49500f4f511bddee2b9c064476ed1ff408215c5424c0d6de61e38c6ee4a9a91b8ae257a3be3e6e779e3d419b4d70ec6e7eab872090dd0a125e40c93
-
SSDEEP
3072:z73e3epoLjNYZLPOTSuhUmkbc6RRv/vT2ChcAAuGEu:toLqPOTSuhULbc6RRvXT2wyrE
Malware Config
Signatures
Files
-
c296f67a2e8d7091bdce72a877f59acaa0719801615b1e5aef97181c0f85d623.exe windows x86
a03f08e027147f1f4d1fea8ded27b2fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
ord690
ord187
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord518
ord519
ord558
ord665
Zombie_GetTypeInfo
ord300
ord595
ord598
ord305
ord306
ord520
ord307
ord631
ord633
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord670
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord313
ord712
ord606
ord607
ord318
ord717
ord319
ord534
ProcCallEngine
ord535
ord536
ord644
ord645
ord571
ord681
ord685
ord578
ord100
ord689
ord320
ord321
ord616
ord617
ord618
ord619
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ