Static task
static1
Behavioral task
behavioral1
Sample
ada39b04276a9b85f6583a99018c81c29cbeca95fcae3da24d7af08ef35e9ba6.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ada39b04276a9b85f6583a99018c81c29cbeca95fcae3da24d7af08ef35e9ba6.exe
Resource
win10v2004-20230703-en
General
-
Target
ada39b04276a9b85f6583a99018c81c29cbeca95fcae3da24d7af08ef35e9ba6
-
Size
5.1MB
-
MD5
c837a94ce9e50568844baf09f4f0373a
-
SHA1
bdb3422d04780d3306449a15109f80a7d4f55fe5
-
SHA256
ada39b04276a9b85f6583a99018c81c29cbeca95fcae3da24d7af08ef35e9ba6
-
SHA512
2cf72b76029e1fac17deeff6e4069cf6dfefc8166f6376afb8329901fb26613cbb87d0dfadde9201cba948fc1f59c9022963bd9b1873198a71714b275469a030
-
SSDEEP
98304:R/15TcIhnGeqAo9Yb8sHYh28mfCH7xUY6f:R/Qvnr9Yb83xbCY6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ada39b04276a9b85f6583a99018c81c29cbeca95fcae3da24d7af08ef35e9ba6
Files
-
ada39b04276a9b85f6583a99018c81c29cbeca95fcae3da24d7af08ef35e9ba6.exe windows x86
418b1f8a3d22f784fa456e25e66b7e81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm50
__vbaVarSub
Sections
pec1 Size: 91KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE