Static task
static1
Behavioral task
behavioral1
Sample
0ac9a38a40e0ebebed33cdaecb31fbd84eb41867d2a6715249665dad579d9a99.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0ac9a38a40e0ebebed33cdaecb31fbd84eb41867d2a6715249665dad579d9a99.exe
Resource
win10v2004-20230220-en
General
-
Target
0ac9a38a40e0ebebed33cdaecb31fbd84eb41867d2a6715249665dad579d9a99
-
Size
652KB
-
MD5
0dfe87daf9ea23e677c53ddd6642636a
-
SHA1
51d3a5c2bf1e234d95de432cf2d42b1954335c4c
-
SHA256
0ac9a38a40e0ebebed33cdaecb31fbd84eb41867d2a6715249665dad579d9a99
-
SHA512
677be1a5125ed6a859cc49d761cb5f15ae34002bd4f085e18965d34fb78aa6a0dd2c0c8e772112e8540862ffa57425d61d0a8b96228b6c3d4c4497d5abaf3dcb
-
SSDEEP
12288:IpIg/ZKKsM6eRTd2NUTTCWaBjKKqoz7iJ7qtJYoqIZXieAFe/y7apm0gAsqSoyN:3g/Z3sMPRTRTH2p1Y+hil+r8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ac9a38a40e0ebebed33cdaecb31fbd84eb41867d2a6715249665dad579d9a99
Files
-
0ac9a38a40e0ebebed33cdaecb31fbd84eb41867d2a6715249665dad579d9a99.exe windows x86
0471d9f3d9f142373524705d6a5cb951
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
Sections
.text Size: 644KB - Virtual size: 643KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ