Static task
static1
Behavioral task
behavioral1
Sample
699bfd3980c18640d8ada322c8d2f7e0567c7e4026b65b7396c6d27bdb86cc87.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
699bfd3980c18640d8ada322c8d2f7e0567c7e4026b65b7396c6d27bdb86cc87.exe
Resource
win10v2004-20230703-en
General
-
Target
699bfd3980c18640d8ada322c8d2f7e0567c7e4026b65b7396c6d27bdb86cc87
-
Size
24KB
-
MD5
20e77296926646efcf61770606db6bd6
-
SHA1
f5c2f31f071e47413323e42f014d0dbf2659fad0
-
SHA256
699bfd3980c18640d8ada322c8d2f7e0567c7e4026b65b7396c6d27bdb86cc87
-
SHA512
49cd7bf9193b240e1be34194b49a2545ef67c97b3b58bf93413d0f3ad43b9d0e38e7d83779c131b648852c7c29af7ad4e395fa87f0465b040dc17adde52fadb5
-
SSDEEP
192:sYWghh4CSoWb0m9d9bSK0Amd4EKV+hh4CS:sYXPW9bJdH0Amd45V+PW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 699bfd3980c18640d8ada322c8d2f7e0567c7e4026b65b7396c6d27bdb86cc87
Files
-
699bfd3980c18640d8ada322c8d2f7e0567c7e4026b65b7396c6d27bdb86cc87.exe windows x86
6d7336c58f5adc331e591670f08b78a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord595
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord100
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ