Static task
static1
Behavioral task
behavioral1
Sample
LHelper.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
LHelper.exe
Resource
win10v2004-20230220-en
General
-
Target
LHelper.exe
-
Size
348KB
-
MD5
0a23223f7c9d914dba1c1086218411a1
-
SHA1
23186094cb713bac08ed784ae631090f9241077f
-
SHA256
35743376c01d99c7829d72e55204bdf7a3137c30cb8d29057c5696c8828e27c4
-
SHA512
2cc3b69d1ce7dda3a9f0fb2948be27d964e01fed9e9de0852e62feb406dd5bb04b21971ec0d776dfa8c4fa447feff2833bf539593d79906059ba0890a6daa0db
-
SSDEEP
6144:qxn3HyOJ98pulR6OZ679p3a2oK6miliZhK4ulR6OZ679p3a2w:qx+pulR367LN6jliZc4ulR367Lw
Malware Config
Signatures
Files
-
LHelper.exe.exe windows x86
e29895a75b5165e9d456f5c45fb7d927
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord519
ord553
ord662
Zombie_GetTypeInfo
ord669
ord300
ord595
ord598
ord599
ord306
EVENT_SINK_AddRef
ord527
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord319
ProcCallEngine
ord537
ord685
ord100
ord320
ord321
ord616
ord619
ord651
ord546
ord581
Sections
.text Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ