Static task
static1
Behavioral task
behavioral1
Sample
e040c4143c17fd6551f137915db5747797704a26800e9248c7951131c7a2996e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e040c4143c17fd6551f137915db5747797704a26800e9248c7951131c7a2996e.exe
Resource
win10v2004-20221111-en
General
-
Target
e040c4143c17fd6551f137915db5747797704a26800e9248c7951131c7a2996e
-
Size
93KB
-
MD5
e5cb7fc237fe6fc8e2d9315b010bfdde
-
SHA1
5d3eb3b7d7fb46ce3bed0feb5f6f4613f7c11dfd
-
SHA256
e040c4143c17fd6551f137915db5747797704a26800e9248c7951131c7a2996e
-
SHA512
c39b499db5f9077b394d6922de4bae80c7b638254e629aff7d71e80d1bf4d1771dacb0b7691bc560cebbf3e2375497fa715bb9ac119c54e4d6eb6e6028852241
-
SSDEEP
768:Y33OwYaNF+gs3OyaAo4v3O/mq8YvcVPK61W0okgy1cwGq0F4Yw2L9sDbk7:YOwxAtmeqhvcVt19okiPt9Bs/
Malware Config
Signatures
Files
-
e040c4143c17fd6551f137915db5747797704a26800e9248c7951131c7a2996e.exe windows x86
7154e4bbcdd1b9d054765e1a72ce2481
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
csrqhnf Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE