Static task
static1
Behavioral task
behavioral1
Sample
56d27b2a741080e28c0d2fc8146737f405c2b1d221d1f0ea64739e7e41573c4e.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
56d27b2a741080e28c0d2fc8146737f405c2b1d221d1f0ea64739e7e41573c4e.exe
Resource
win10v2004-20231020-en
General
-
Target
56d27b2a741080e28c0d2fc8146737f405c2b1d221d1f0ea64739e7e41573c4e
-
Size
732KB
-
MD5
26d2b85c2a6426a05287c82a2978ad68
-
SHA1
59741329b8dac82dd3c65863194522464d9ede73
-
SHA256
56d27b2a741080e28c0d2fc8146737f405c2b1d221d1f0ea64739e7e41573c4e
-
SHA512
765f4a9e2d1aa2d003626f16fb7eedaac20ce2036cabd13e3852fcd4908f5cbbe58d62a21f4b042648eed46d9e00ad74ec960fb93682c584b6a576ecea9d8e9c
-
SSDEEP
12288:AQJsPgQOkp61iFNm7GzEPyP6Eb/UzOpy:AQJsIQOkRFw64PySELqCy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56d27b2a741080e28c0d2fc8146737f405c2b1d221d1f0ea64739e7e41573c4e
Files
-
56d27b2a741080e28c0d2fc8146737f405c2b1d221d1f0ea64739e7e41573c4e.exe windows:4 windows x86
7b61ed38559bf18bcda85a1a6f3a11fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
ord527
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord645
ord100
Sections
.text Size: 504KB - Virtual size: 502KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 224KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ