Static task
static1
Behavioral task
behavioral1
Sample
eee4b4f1498a42dfd53bc5661bd8c0af81aa560b7ef9bcfee44075397a77d02c.exe
Resource
win7-20230831-en
General
-
Target
eee4b4f1498a42dfd53bc5661bd8c0af81aa560b7ef9bcfee44075397a77d02c
-
Size
80KB
-
MD5
4d13ec5e293d685954fee97edff118ba
-
SHA1
5f05878fb4073113dee15f8a43dbe101451ea840
-
SHA256
eee4b4f1498a42dfd53bc5661bd8c0af81aa560b7ef9bcfee44075397a77d02c
-
SHA512
b53e5fff72751767540fbf67f140e875922d744a9ad534052aea794cacc2719468403b279793672536b40ca60fcf22aa1567e908f5b99bf740b1239d227e4a4c
-
SSDEEP
768:41IO21FPBW1A5Ygk1B3luIo+tHz+zXzWZuOp8uTyAtN6U7bhlpb1vP0tah4vZx1U:xLPG73dJ779iyWKQ1O+ryHEJc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eee4b4f1498a42dfd53bc5661bd8c0af81aa560b7ef9bcfee44075397a77d02c
Files
-
eee4b4f1498a42dfd53bc5661bd8c0af81aa560b7ef9bcfee44075397a77d02c.exe windows:4 windows x86
d91571709262dad94fdd21eb75609c71
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord517
ord626
ord519
ord666
ord667
ord300
ord304
ord598
ord306
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord566
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord712
ord606
ord607
ord608
ord716
ord531
ord532
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord576
ord685
ord100
ord579
ord612
ord616
ord617
ord618
Sections
.text Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ