Overview
overview
6Static
static
3jokes/Black&White.exe
windows7-x64
1jokes/Black&White.exe
windows10-2004-x64
1jokes/Blank.exe
windows7-x64
1jokes/Blank.exe
windows10-2004-x64
1jokes/Bubbler.exe
windows7-x64
1jokes/Bubbler.exe
windows10-2004-x64
1jokes/DScroller.exe
windows7-x64
1jokes/DScroller.exe
windows10-2004-x64
1jokes/Desk...er.exe
windows7-x64
1jokes/Desk...er.exe
windows10-2004-x64
1jokes/Flip.exe
windows7-x64
1jokes/Flip.exe
windows10-2004-x64
1jokes/Hello.exe
windows7-x64
1jokes/Hello.exe
windows10-2004-x64
1jokes/Invert.exe
windows7-x64
1jokes/Invert.exe
windows10-2004-x64
1jokes/Patterns.exe
windows7-x64
1jokes/Patterns.exe
windows10-2004-x64
1jokes/TheBestFree.url
windows7-x64
6jokes/TheBestFree.url
windows10-2004-x64
3jokes/Visi...ix.url
windows7-x64
1jokes/Visi...ix.url
windows10-2004-x64
1jokes/eraser.exe
windows7-x64
1jokes/eraser.exe
windows10-2004-x64
1jokes/halyava.exe
windows7-x64
1jokes/halyava.exe
windows10-2004-x64
1jokes/myWeb.exe
windows7-x64
1jokes/myWeb.exe
windows10-2004-x64
1jokes/stretch.exe
windows7-x64
1jokes/stretch.exe
windows10-2004-x64
1jokes/stretcher.exe
windows7-x64
1jokes/stretcher.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
jokes/Black&White.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
jokes/Black&White.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
jokes/Blank.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
jokes/Blank.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
jokes/Bubbler.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
jokes/Bubbler.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
jokes/DScroller.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
jokes/DScroller.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
jokes/DeskScroller.exe
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
jokes/DeskScroller.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
jokes/Flip.exe
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
jokes/Flip.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
jokes/Hello.exe
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
jokes/Hello.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
jokes/Invert.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
jokes/Invert.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
jokes/Patterns.exe
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
jokes/Patterns.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
jokes/TheBestFree.url
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
jokes/TheBestFree.url
Resource
win10v2004-20231222-en
Behavioral task
behavioral21
Sample
jokes/Visit HotMix.url
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
jokes/Visit HotMix.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
jokes/eraser.exe
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
jokes/eraser.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
jokes/halyava.exe
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
jokes/halyava.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
jokes/myWeb.exe
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
jokes/myWeb.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
jokes/stretch.exe
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
jokes/stretch.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
jokes/stretcher.exe
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
jokes/stretcher.exe
Resource
win10v2004-20231215-en
General
-
Target
2ce32b7cc1b88e322ac34d226e9ad75b
-
Size
96KB
-
MD5
2ce32b7cc1b88e322ac34d226e9ad75b
-
SHA1
9d79b671af190bd22c117f93489f9aed40197fd9
-
SHA256
e469610b04e2f178238c9b2d1997db1b8bb40d8688d6b3866de6e89b399c0742
-
SHA512
f7ce300b4cae3f76ff03221c99b9351228303f5aaadfe344451483f6b961845e03056d8bef06077a467022be20f630b8e7c8f2057ccfde8bbaf7c3b97d350573
-
SSDEEP
3072:l4uqvm84iAXTCnKekbIW9w7AIoHQi6Z+rCvjRJC5T:Yert9UoHQBgA0h
Malware Config
Signatures
-
Unsigned PE 14 IoCs
Checks for missing Authenticode signature.
resource unpack001/jokes/Black&White.exe unpack001/jokes/Blank.exe unpack001/jokes/Bubbler.exe unpack001/jokes/DScroller.exe unpack001/jokes/DeskScroller.exe unpack001/jokes/Flip.exe unpack001/jokes/Hello.exe unpack001/jokes/Invert.exe unpack001/jokes/Patterns.exe unpack001/jokes/eraser.exe unpack001/jokes/halyava.exe unpack001/jokes/myWeb.exe unpack001/jokes/stretch.exe unpack001/jokes/stretcher.exe
Files
-
2ce32b7cc1b88e322ac34d226e9ad75b.zip
-
WOreadme.txt
-
jokes/Black&White.exe.exe windows:4 windows x86 arch:x86
5dd1836c1e224904e3cd2a87112e4138
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
ord588
MethCallEngine
ord622
ord594
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
jokes/Blank.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
jokes/Bubbler.exe.exe windows:4 windows x86 arch:x86
30ef55450ef8b8010da378e18e6195ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
MethCallEngine
ord622
ord593
ord594
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 738B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
jokes/DScroller.exe.exe windows:4 windows x86 arch:x86
a8cf74ad38a8482830aa11ef599fa4b4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
MethCallEngine
ord593
ord594
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
jokes/DeskScroller.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
jokes/Flip.exe.exe windows:4 windows x86 arch:x86
ce2a74c7f83cd91a27e9c3928f8755a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 286B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
jokes/Hello.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
jokes/Invert.exe.exe windows:4 windows x86 arch:x86
5890f5da18df6f585d44394584caeca4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
MethCallEngine
ord622
ord594
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
jokes/Patterns.exe.exe windows:4 windows x86 arch:x86
91d8ff10e356a80869a85f266852ee61
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
ord588
ord589
MethCallEngine
ord593
ord594
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord534
ord100
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 426B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
jokes/TheBestFree.url.url
-
jokes/Visit HotMix.url.url
-
jokes/eraser.exe.exe windows:4 windows x86 arch:x86
9ddc6ff755f1ee9d1cab4d6cb4bfc662
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
MethCallEngine
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
jokes/halyava.exe.exe windows:4 windows x86 arch:x86
8c8e94b68f5d26f5c9038f0ab3b30838
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
MethCallEngine
ord595
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord534
ProcCallEngine
ord100
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
jokes/myWeb.exe.exe windows:4 windows x86 arch:x86
e617641d7d39fd7e763d0885438f80ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
ord588
MethCallEngine
ord593
ord594
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
jokes/readme.txt
-
jokes/stretch.exe.exe windows:4 windows x86 arch:x86
ce2a74c7f83cd91a27e9c3928f8755a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 286B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
jokes/stretcher.exe.exe windows:4 windows x86 arch:x86
82159d7faf234e23677fcb72d7a5545f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
__vbaFreeVar
__vbaEnd
MethCallEngine
__vbaFreeObjList
__vbaSetSystemError
__vbaHresultCheckObj
ord594
__vbaObjSet
__vbaObjSetAddref
EVENT_SINK_AddRef
__vbaI2I4
DllFunctionCall
EVENT_SINK_Release
__vbaUI1I2
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaErrorOverflow
__vbaNew2
ord100
__vbaFpI2
__vbaFpI4
__vbaCastObj
__vbaFreeObj
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ