Static task
static1
Behavioral task
behavioral1
Sample
05d54597b05aa878332b8bd782690da7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05d54597b05aa878332b8bd782690da7.exe
Resource
win10v2004-20231215-en
General
-
Target
05d54597b05aa878332b8bd782690da7
-
Size
28KB
-
MD5
05d54597b05aa878332b8bd782690da7
-
SHA1
239d27ea135b9244a21cb977be9f72e2d47ad1e3
-
SHA256
7e97875969d80ff3bb372b824dba7580408a6aebc689d8b8baec8281f7d0a79a
-
SHA512
375223f7a8fecd97cc1439af03eb6d37955a790b5a0536121d2e5c0c3b6d6c95c7b7b5c20951c94b70c28000b4951e239fa2a6b8f29ff9d4783b0f868c1a86c2
-
SSDEEP
192:BA9+POvvWCm6TfoXvv48UDiiN8Ey0GDTQh0c7VOX7bQ5oKila2CWWHY9utRYgvs3:BAOLh/vXgiQpViwLilxCWWHYYtRGKW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05d54597b05aa878332b8bd782690da7
Files
-
05d54597b05aa878332b8bd782690da7.exe windows:4 windows x86 arch:x86
7825319ea1befbce6eeaa4e8702e10a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
MethCallEngine
ord519
ord595
ord598
ord709
ord631
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord681
ord100
ord689
ord610
ord617
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ