Static task
static1
Behavioral task
behavioral1
Sample
f367966b5ad524dd5d8f0f018edc204c565d06c49445de50b3ced516f9a5471c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f367966b5ad524dd5d8f0f018edc204c565d06c49445de50b3ced516f9a5471c.exe
Resource
win10v2004-20221111-en
General
-
Target
f367966b5ad524dd5d8f0f018edc204c565d06c49445de50b3ced516f9a5471c
-
Size
1.2MB
-
MD5
263b337f969b59798052dbd4fdaf45d5
-
SHA1
b33f65132d939819f46f595ba20266c1fde264db
-
SHA256
f367966b5ad524dd5d8f0f018edc204c565d06c49445de50b3ced516f9a5471c
-
SHA512
a50c9ae9e1fa9fd86f816aeaec605a9fbdcf7675e09441f51bcf8e4e3b7b3f2e3413dbaf16a951538aedda3340a6341e979a66fbc4e9ce3460484614abff5509
-
SSDEEP
24576:t+qKlaMPsgaRzUik3QjVJfVUyEE6gUvuCLSLtwCc26uGi2VCHXSBzTaDMsAQRy:t+q3M0QivVJfVUyE1BvucSLWpYgBzsMT
Malware Config
Signatures
Files
-
f367966b5ad524dd5d8f0f018edc204c565d06c49445de50b3ced516f9a5471c.exe windows x86
5b167ab4c2210485b209e3f4c0238f6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
ord588
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord599
ord709
ord631
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord319
ProcCallEngine
ord644
ord537
ord572
ord681
ord685
ord100
ord320
ord321
ord581
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 620KB - Virtual size: 618KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ