Static task
static1
Behavioral task
behavioral1
Sample
bd9218fb2c942d48eedf4a5da74b23fbb994cfe38237979469d88f03b7902946.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bd9218fb2c942d48eedf4a5da74b23fbb994cfe38237979469d88f03b7902946.exe
Resource
win10v2004-20230915-en
General
-
Target
bd9218fb2c942d48eedf4a5da74b23fbb994cfe38237979469d88f03b7902946
-
Size
20KB
-
MD5
10684cd7cd8bf4d59ab463c8c84914db
-
SHA1
e5347483ec5ab0f47c6e80769549c8485f1ce436
-
SHA256
bd9218fb2c942d48eedf4a5da74b23fbb994cfe38237979469d88f03b7902946
-
SHA512
c05e449ab60a9e7d82ae78c0df8559166c4ac822d232775d7c5414728a4c3a4a141d20cdd91305d1adf625e0c6c1db1ce6165465a5b08a96cabe1d8ac43f7f1a
-
SSDEEP
192:0wfaFTBvDVHHgxZxZx+mVWbUXHMTPI9d+gxZxZxr:0bFdbVK0eHMTPI9dn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd9218fb2c942d48eedf4a5da74b23fbb994cfe38237979469d88f03b7902946
Files
-
bd9218fb2c942d48eedf4a5da74b23fbb994cfe38237979469d88f03b7902946.exe windows:4 windows x86
0e0d09372d0069a41c8c14103f013c10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord598
ord631
ord632
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord535
ord572
ord685
ord100
ord619
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ