Static task
static1
Behavioral task
behavioral1
Sample
0a59c7436663e93f2050dfe23b81926a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a59c7436663e93f2050dfe23b81926a.exe
Resource
win10v2004-20231215-en
General
-
Target
0a59c7436663e93f2050dfe23b81926a
-
Size
207KB
-
MD5
0a59c7436663e93f2050dfe23b81926a
-
SHA1
8b15aa50cd5ca62f7c60416ff128129da01a6fad
-
SHA256
57b3823464b1c6c938adb67f8c71c9ab6890e38e94c5a497fb88fd4da72d01c3
-
SHA512
451f6667adfc12e8d5caf06d8fe767d223b2a285946eaf5e04913a79512d736c2a2c8fa6db75bb5f77ab2e332341caa196c2405282bbe0a4f11df1b7ee7e3a7f
-
SSDEEP
6144:teL+Q8WU1WrAZ/bP3RDJZDG1/kb0ZpXJiwirFeScyDKGJfJ+ky:s+tnMAZ73RDzukAZpXvir3KG/+ky
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a59c7436663e93f2050dfe23b81926a
Files
-
0a59c7436663e93f2050dfe23b81926a.exe windows:4 windows x86 arch:x86
3f23da773aa68a2cf6453f3f669f059f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
__vbaStrI2
Sections
Size: 88KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE