Static task
static1
Behavioral task
behavioral1
Sample
a121ac1b7913efa7ca8552beff5953c92301ae60bfdb0c23d1c8c8c11e142ebd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a121ac1b7913efa7ca8552beff5953c92301ae60bfdb0c23d1c8c8c11e142ebd.exe
Resource
win10v2004-20221111-en
General
-
Target
a121ac1b7913efa7ca8552beff5953c92301ae60bfdb0c23d1c8c8c11e142ebd
-
Size
456KB
-
MD5
3c61c2ab9004c2d0104c9cd4efbfece0
-
SHA1
7df6a66f27b0cc434ec16adc2aff0e082d0163c1
-
SHA256
a121ac1b7913efa7ca8552beff5953c92301ae60bfdb0c23d1c8c8c11e142ebd
-
SHA512
42f83d87b3e1447d6f2b8b208d1141ec7f4197aa5909e2fbf468d79a210f9794290a52104046f04b29cde645271fef5625b7a55cc8dc845547bbd50c5e57f2c0
-
SSDEEP
1536:L7wPbl3SnWpKYn18P426IYvD7cKMHjCmv6icdcSz/r8dJXrXbjXsXo3wJ8w39gqg:L7w7KoKP0HqTXCtr8X3jXsJ8fVB
Malware Config
Signatures
Files
-
a121ac1b7913efa7ca8552beff5953c92301ae60bfdb0c23d1c8c8c11e142ebd.exe windows x86
da1c71f8166ba9a860e4b308af67cff6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
ord584
ord516
ord517
ord660
ord593
ord594
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
Zombie_AddRef
ord573
ord100
ord616
ord617
ord618
ord546
ord581
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
goakyir Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tqzigvy Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gigqqvs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE