Static task
static1
Behavioral task
behavioral1
Sample
d8ea408260319428541bb48eb7fb0ad9f1c115d0faa243aefc27c28399eb5277.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d8ea408260319428541bb48eb7fb0ad9f1c115d0faa243aefc27c28399eb5277.exe
Resource
win10v2004-20230703-en
General
-
Target
b074e0cc3c448376b30b4f65805bb368.bin
-
Size
25KB
-
MD5
06105c62f8b9a72527f5c9e876205013
-
SHA1
9dd21f46e65de3fef8e06310238c5c0fa767e5b4
-
SHA256
5236fb4550f6a44d270227ef18dc6e06873e30181c3f30932dc5a117ab2a539a
-
SHA512
9c2bae5e0f95973a2950434f509696324793247100c29d74768a8fb2b20e1609ccf91a2a59e791f8fef36ba2d23dab72488c24e1843e338d296f8343e26f6b69
-
SSDEEP
768:U+dcvI3ruzjRxQFDrmBL3dT66ABK/NqaSn:U+iCy/RxcrmBL3dTAKi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d8ea408260319428541bb48eb7fb0ad9f1c115d0faa243aefc27c28399eb5277.exe
Files
-
b074e0cc3c448376b30b4f65805bb368.bin.zip
Password: infected
-
d8ea408260319428541bb48eb7fb0ad9f1c115d0faa243aefc27c28399eb5277.exe.exe windows x86
Password: infected
67814fc50fc21633690e8019e09509fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord666
ord593
ord595
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord535
ord100
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ