Static task
static1
Behavioral task
behavioral1
Sample
90c824c68bb1094162cd3e998ede07d7f3572482bad167f96c2bf17a5690bc18.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
90c824c68bb1094162cd3e998ede07d7f3572482bad167f96c2bf17a5690bc18.exe
Resource
win10v2004-20230831-en
General
-
Target
90c824c68bb1094162cd3e998ede07d7f3572482bad167f96c2bf17a5690bc18
-
Size
80KB
-
MD5
1126c674cf791eae13e80b0fbbc3ff60
-
SHA1
012ea21a45ee3cd2bd3b3ef6ee3bd2bd00dd07e4
-
SHA256
90c824c68bb1094162cd3e998ede07d7f3572482bad167f96c2bf17a5690bc18
-
SHA512
a75fd2e6c8d89c2944d30417174e1c9f8a6b7b4b3aff355a45258ff9b19c38b2c20a230386445045a2bba0daf6090a3bdda461d575049ebf9ef152d0f949ab24
-
SSDEEP
1536:2IEJB0CHl1D5hSVRUSi/5/tc2edhWhtLyaF:2IEVHrWbUSi/xt3IWhLF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 90c824c68bb1094162cd3e998ede07d7f3572482bad167f96c2bf17a5690bc18
Files
-
90c824c68bb1094162cd3e998ede07d7f3572482bad167f96c2bf17a5690bc18.exe windows x86
49a72025bad13b91780acfb70950107a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord626
ord553
ord593
ord595
ord598
ord525
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord716
ord534
ProcCallEngine
ord537
ord645
ord685
ord100
ord616
ord619
ord545
ord546
Sections
.text Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ