Static task
static1
Behavioral task
behavioral1
Sample
f63bbe403fef1a3d8353bb00514f54771669ba8f2bff1529d2f2f994462603b4.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
f63bbe403fef1a3d8353bb00514f54771669ba8f2bff1529d2f2f994462603b4.exe
Resource
win10v2004-20231025-en
General
-
Target
f63bbe403fef1a3d8353bb00514f54771669ba8f2bff1529d2f2f994462603b4
-
Size
15.7MB
-
MD5
0cf15431169673f125b36a1eaa3ed317
-
SHA1
2a57097d73565836fda96be1204237779d13fd14
-
SHA256
f63bbe403fef1a3d8353bb00514f54771669ba8f2bff1529d2f2f994462603b4
-
SHA512
5d4d743e46528fa09bc4d637de8e94b31366bfb9105d22b7973cb0083e33bafeafb7703ae9adf2d5e4e86f7c0c8e64a36445711ca77d253649dfd70cb91bc803
-
SSDEEP
393216:FxWNOhE/b8k0mresCLG4tGitxeuSL+mJ/6ArDXmm7XB3UUpmB:2NSE/b10mr1b4tGitxeuSL+mJ/6ArDXC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f63bbe403fef1a3d8353bb00514f54771669ba8f2bff1529d2f2f994462603b4
Files
-
f63bbe403fef1a3d8353bb00514f54771669ba8f2bff1529d2f2f994462603b4.exe windows:4 windows x86 arch:x86
5047b861482ef826acab08cbb7b71bb9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
ord690
ord588
ord696
ord589
ord698
MethCallEngine
EVENT_SINK_Invoke
ord513
ord620
ord515
ord516
ord517
ord518
ord519
ord629
ord552
ord553
ord660
ord661
ord662
ord557
ord667
Zombie_GetTypeInfo
ord591
ord592
ord593
ord594
ord595
ord596
ord303
ord598
ord305
ord520
ord706
ord522
ord707
ord309
ord709
ord524
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord560
ord561
DllFunctionCall
ord563
ord564
ord567
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord601
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord313
ord712
ord713
ord606
ord607
ord715
ord608
ord531
ord716
ord717
ord319
ProcCallEngine
ord644
ord537
ord538
ord645
ord647
ord570
ord648
ord572
ord573
ord681
ord577
ord578
ord685
ord100
ord579
ord689
ord610
ord320
ord321
ord613
ord616
ord617
ord618
ord619
ord542
ord543
ord650
ord544
ord545
ord546
ord547
ord580
ord581
Sections
.text Size: 15.7MB - Virtual size: 15.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 495KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ