Static task
static1
Behavioral task
behavioral1
Sample
045e5706ec23b53595e793c944505800.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
045e5706ec23b53595e793c944505800.exe
Resource
win10v2004-20231215-en
General
-
Target
045e5706ec23b53595e793c944505800
-
Size
369KB
-
MD5
045e5706ec23b53595e793c944505800
-
SHA1
0f437a0a848d9f523104996f7c591ed3514d5b1d
-
SHA256
b4bd7e6fd13d6ea9bdfded08b0aa10d8a2e6119abc3e8cecca190fcf46d3c223
-
SHA512
8df0c1e68dec5f61a576e0a6ab0d70d9040572c1afc4d4d6747d72713abc9f89f8e7ae699d91525973d1e137284c6fab52a3092d42fde6d19042498f231d47b6
-
SSDEEP
6144:M4f7nLLa3qNFqS7QYpdE9nOYrXFix1dFgnfbMOSp:M4f7nLLasFh109n7rViDsnfbwp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 045e5706ec23b53595e793c944505800
Files
-
045e5706ec23b53595e793c944505800.exe windows:4 windows x86 arch:x86
fb0e959b292927b475145c6c5ed9ef1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord666
ord593
ord594
ord598
ord632
DllFunctionCall
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord535
ord644
ord648
ord681
ord578
ord100
ord617
ord619
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 297KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE