Static task
static1
Behavioral task
behavioral1
Sample
VBA1uub1CmqSGa2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
VBA1uub1CmqSGa2.exe
Resource
win10v2004-20230220-en
General
-
Target
VBA1uub1CmqSGa2.exe
-
Size
577KB
-
MD5
c53d353d1cf81395ce70edd3c2e1b969
-
SHA1
db40c372dc4b07469315cb02549ca12d17f2e3d4
-
SHA256
11c40e089217d16a0e9011687cf21883e5039ea51c1f32f529d55190e81214bf
-
SHA512
fd01e2de7e535784d29f6ffb747c1355cd30b6da26af003826a57b3e869dd9dd78965a6a036b403add15e4570e65f6f9fd7ac0abf84d3ca4122649dcb35c9da2
-
SSDEEP
12288:uNj5AyhI1qm1zDX+CH6yVOV5uRTECEoyZZ6eKaA9:u3jBm9DuCH6y8V5+T0ZsFa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VBA1uub1CmqSGa2.exe
Files
-
VBA1uub1CmqSGa2.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ