Static task
static1
Behavioral task
behavioral1
Sample
0918d4cf430b0225b5e7014f50a0d6af.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0918d4cf430b0225b5e7014f50a0d6af.exe
Resource
win10v2004-20231222-en
General
-
Target
0918d4cf430b0225b5e7014f50a0d6af
-
Size
34KB
-
MD5
0918d4cf430b0225b5e7014f50a0d6af
-
SHA1
1bdc1178ae174b9b57bda4703dbe2f018f23ee62
-
SHA256
7b9210e366dc3e15af43594958f54b3c0ecb3ee3387568ee07556573938c9764
-
SHA512
bfb51d9d67e84a75e4d3da11aa48d8071553006b419848e094b8eed296e9246e00708c8b99b0e7250305b8a6c6bf50e1c9baaf391ac1f2ec19c35233a8dc1544
-
SSDEEP
768:zpl/DABvltaKrgyfuqH5E8MMaPuJIS+Pa:VZDAMKrXfPZE8MMaPEL+Pa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0918d4cf430b0225b5e7014f50a0d6af
Files
-
0918d4cf430b0225b5e7014f50a0d6af.exe windows:4 windows x86 arch:x86
dd1352569303e3b273bd3993f9bd7d7b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ