Static task
static1
Behavioral task
behavioral1
Sample
b522b3cf850363e7f781d0c7607778d5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b522b3cf850363e7f781d0c7607778d5.exe
Resource
win10v2004-20240226-en
General
-
Target
b522b3cf850363e7f781d0c7607778d5
-
Size
137KB
-
MD5
b522b3cf850363e7f781d0c7607778d5
-
SHA1
9aa8cac373be2067a760774e444baa81df9e2508
-
SHA256
67ba90c10a282d9d700b794f9b91057a74b55721e2e3cda09227a8752cc28c12
-
SHA512
f877e8bfee5dc80e9b6c5e0d9738274384b2a5cd1d6d94e87d4513dc55ff90f316d73c3d815c18df602e994e1a97a1e4821754285ad174bab777002235b86d6b
-
SSDEEP
1536:Rxj2TZd10rgNiWGPwF4W9r8MVQfO3oDbCewGcRmEb:RWZXlD9r8aXh7ph
Malware Config
Signatures
Files
-
b522b3cf850363e7f781d0c7607778d5.exe windows:4 windows x86 arch:x86
f7bb48df18e4ef97bd19fa9f643dda12
Code Sign
Certificate
IssuerCN=ineradicablen,OU=ALMENPANSIDED,O=Memorizablesin,L=ARBEJDSMINIS,ST=ACETAMIDINAGRAMANE,C=SG,1.2.840.113549.1.9.1=#0c25707261676d617469636161657465727040747574656c6167657376656a727564732e74616bNot Before01/07/2021, 10:19Not After01/07/2022, 10:19SubjectCN=ineradicablen,OU=ALMENPANSIDED,O=Memorizablesin,L=ARBEJDSMINIS,ST=ACETAMIDINAGRAMANE,C=SG,1.2.840.113549.1.9.1=#0c25707261676d617469636161657465727040747574656c6167657376656a727564732e74616b0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/01/2021, 00:00Not After06/01/2031, 00:00SubjectCN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07/01/2016, 12:00Not After07/01/2031, 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
9b:82:4f:75:a3:69:91:7e:66:29:21:53:96:55:05:f7:d0:62:eb:1b:fa:0e:df:30:75:9f:8f:c5:9f:81:ca:1fSigner
Actual PE Digest9b:82:4f:75:a3:69:91:7e:66:29:21:53:96:55:05:f7:d0:62:eb:1b:fa:0e:df:30:75:9f:8f:c5:9f:81:ca:1fDigest Algorithmsha256PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
ord584
_CIcos
_adj_fptan
__vbaVarMove
__vbaHresultCheck
__vbaFreeVar
__vbaAryMove
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
ord516
_adj_fprem1
ord519
ord552
__vbaSetSystemError
__vbaHresultCheckObj
ord557
_adj_fdiv_m32
ord559
__vbaAryDestruct
ord591
ord592
__vbaBoolStr
__vbaI4Abs
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord704
ord705
ord706
ord707
__vbaFpR8
_CIsin
ord631
ord632
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
ord529
__vbaAryConstruct2
DllFunctionCall
ord671
ord564
_adj_fpatan
ord675
__vbaLateIdCallLd
ord569
ord676
__vbaRedim
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
ord710
__vbaExceptHandler
ord713
_adj_fprem
_adj_fdivr_m64
__vbaVarErrI4
ord609
__vbaFPException
ord532
ord535
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
ord570
__vbaR8Str
ord648
__vbaVar2Vec
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord573
__vbaFreeStrList
_adj_fdivr_m32
ord684
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
ord689
ord610
__vbaLateMemCall
__vbaInStrB
__vbaVarDup
__vbaStrToAnsi
ord613
ord615
__vbaFpI4
_CIatan
__vbaStrMove
__vbaCastObj
__vbaUI1Str
_allmul
__vbaLateIdSt
_CItan
ord546
__vbaFPInt
_CIexp
__vbaFreeObj
__vbaFreeStr
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ