Static task
static1
Behavioral task
behavioral1
Sample
e89eeddc0c818126d9ade13d98d4aecf7c6652fd8f81d91bc1811dc5704aa38c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e89eeddc0c818126d9ade13d98d4aecf7c6652fd8f81d91bc1811dc5704aa38c.exe
Resource
win10v2004-20230220-en
General
-
Target
e89eeddc0c818126d9ade13d98d4aecf7c6652fd8f81d91bc1811dc5704aa38c
-
Size
744KB
-
MD5
c4bb74fd387e3cbe60fb2b6dd452e5a5
-
SHA1
a5699853ce42b5e1a95630968c5e5914db3bac92
-
SHA256
e89eeddc0c818126d9ade13d98d4aecf7c6652fd8f81d91bc1811dc5704aa38c
-
SHA512
5dc3fe6d060f2ab9e7e306dcfed04876f7ddbc2e09f6562116ebccb4c50e86580097534089cbf33d31ddf167c48c96b4b7bc73a42842c37c168d5fd870d9c46e
-
SSDEEP
6144:gh16I7DSCECgpMDxYhppqFh16I7DSCECg:aIIz16AYhK/IIz1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e89eeddc0c818126d9ade13d98d4aecf7c6652fd8f81d91bc1811dc5704aa38c
Files
-
e89eeddc0c818126d9ade13d98d4aecf7c6652fd8f81d91bc1811dc5704aa38c.exe windows x86
cc1c30479a31efcc91de77d39741f447
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord520
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ord645
ord571
ord100
ord617
Sections
.text Size: 376KB - Virtual size: 375KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 364KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ