Static task
static1
Behavioral task
behavioral1
Sample
00954ed4d8343f9d755eca7662001425.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00954ed4d8343f9d755eca7662001425.exe
Resource
win10v2004-20231215-en
General
-
Target
00954ed4d8343f9d755eca7662001425
-
Size
16KB
-
MD5
00954ed4d8343f9d755eca7662001425
-
SHA1
8e38e020e4621c5dab0f1e13bc8a128ec7873a03
-
SHA256
77f39a00b7c192f21cb62346bde671ee6fd9213d5d9d5f95c296b506a44cc812
-
SHA512
fd5a64aeef283a3f36da7b806e30d9be80b02bd95558b486f795e8f436c1a82756ec04ba2050935d6b3b687cae766c6c2586969240f4255424761b812b2c5a88
-
SSDEEP
96:5aExm/YfweRuV1kuVFmEzisDxZoeZjSsZtrIn/DdQGC:tlvuV1bX5xZJVYnJQGC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00954ed4d8343f9d755eca7662001425
Files
-
00954ed4d8343f9d755eca7662001425.exe windows:4 windows x86 arch:x86
ae412ed9d50f0e004aa5f90efbfe72df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
ord667
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord681
ord100
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ