Static task
static1
Behavioral task
behavioral1
Sample
f3580333916d424cf875827362fce33c1f201f873b37896fcf5ddc3a556f674c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f3580333916d424cf875827362fce33c1f201f873b37896fcf5ddc3a556f674c.exe
Resource
win10v2004-20230220-en
General
-
Target
f3580333916d424cf875827362fce33c1f201f873b37896fcf5ddc3a556f674c
-
Size
28KB
-
MD5
cb8bb8f6dd886cd9ab62e5eeb33d40ae
-
SHA1
bb85b0d8f35399047709af2ab9ff3f68ab28b306
-
SHA256
f3580333916d424cf875827362fce33c1f201f873b37896fcf5ddc3a556f674c
-
SHA512
9afd67115c1d6e09a0220d2b28f0deb86a1dc721485e0059a67d5eca2a51ae9357a3edcbcb075c65b4c40d6f2ded686d6ce5cf70deee1cbe6458d7c96e96df5a
-
SSDEEP
384:ENG4K7LL/lKlDeBZRa1KKzGgqtsHhDbnIM4K7:ENGjuqZMqtobIM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3580333916d424cf875827362fce33c1f201f873b37896fcf5ddc3a556f674c
Files
-
f3580333916d424cf875827362fce33c1f201f873b37896fcf5ddc3a556f674c.exe windows x86
39e0bd37caef41f11131cde1146f61d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaRecAnsiToUni
__vbaStrCat
ord553
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
ord526
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaAryConstruct2
DllFunctionCall
_adj_fpatan
__vbaRecUniToAnsi
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
__vbaInputFile
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
ord610
__vbaStrToAnsi
ord612
ord617
_CIatan
__vbaStrMove
ord542
ord543
_allmul
ord544
__vbaLateIdSt
ord545
_CItan
ord547
_CIexp
__vbaFreeStr
__vbaFreeObj
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ