Static task
static1
Behavioral task
behavioral1
Sample
1d1e55d56501a4c020359838798b5e9c.exe
Resource
win7-20230712-en
General
-
Target
1d1e55d56501a4c020359838798b5e9c.exe
-
Size
208KB
-
MD5
1d1e55d56501a4c020359838798b5e9c
-
SHA1
049e20770fd71194141c2c0debdfafd317c56ca4
-
SHA256
3c8ae458a96eb7500d2c065c8232645ba3961e981bfaa1e4cbaf6f5d5558ee64
-
SHA512
054798f7f84677e07ecd1f19f4b387afbc24ad01bb3079b61eed182148a06e87595799816ee1931c15181097cbc769bbaa7d43c6dc04c669800272240d924d6e
-
SSDEEP
384:3DVUq67iFRNItImlQN2l0hj4draNwzDHIOu3nrd7DjdYt8Gn5u5nh7uTht1XKvj4:3pUZ7iFfuITgHwNet8Q5Z6vmp+v2o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d1e55d56501a4c020359838798b5e9c.exe
Files
-
1d1e55d56501a4c020359838798b5e9c.exe.exe windows x86
67814fc50fc21633690e8019e09509fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord666
ord593
ord595
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord535
ord100
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ