Static task
static1
Behavioral task
behavioral1
Sample
e953af02756a547e6324d653f9cb381da3a8ecbea889ee3d25feadc0916e86fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e953af02756a547e6324d653f9cb381da3a8ecbea889ee3d25feadc0916e86fe.exe
Resource
win10v2004-20221111-en
General
-
Target
e953af02756a547e6324d653f9cb381da3a8ecbea889ee3d25feadc0916e86fe
-
Size
136KB
-
MD5
682972090404c2321cb1839e6e8b2604
-
SHA1
d116bd4ed5c76fe4e9e3b1011696aefe6ba81836
-
SHA256
e953af02756a547e6324d653f9cb381da3a8ecbea889ee3d25feadc0916e86fe
-
SHA512
2c012d43e39eb358a4911892e07a96c3a37dca36f1f5e2628f145306d0ae7895fa1b7cd1f344a8aa8ec54ddac90ebb85d9fc8dd43a8d2e1397892b883037bdc2
-
SSDEEP
3072:YRDaQ4ZEF+DijtPnRZ+zaDqq4D2lsvMH:ccDDMsvM
Malware Config
Signatures
Files
-
e953af02756a547e6324d653f9cb381da3a8ecbea889ee3d25feadc0916e86fe.exe windows x86
189fad2494d7d34608fe126823ba4b56
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
Zombie_GetTypeInfo
ord300
ord595
ord303
ord599
ord306
ord309
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord537
ord644
ord100
ord581
Sections
.text Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ