Static task
static1
Behavioral task
behavioral1
Sample
3277dcc9349f5ab542a550e97a6be674.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3277dcc9349f5ab542a550e97a6be674.exe
Resource
win10v2004-20231215-en
General
-
Target
3277dcc9349f5ab542a550e97a6be674
-
Size
20KB
-
MD5
3277dcc9349f5ab542a550e97a6be674
-
SHA1
333ce085beb68b617bfedc906a43e739a57ad717
-
SHA256
f010deb4165af80d2642274252dbf820faaa17e200b2af99ef139b277f96c806
-
SHA512
614ef1f62e497d8c35b804bced04f47f37074409cd446a37577cebcceaf57dfc00cf919af65684041edf36b789f776a296d58c8c99e520e780ee885370cd637a
-
SSDEEP
192:y+KTCzhpEyGBqj/jXXLSXrfT/XTuT/XTN10uQoqokI:2YpELtrArAo7kI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3277dcc9349f5ab542a550e97a6be674
Files
-
3277dcc9349f5ab542a550e97a6be674.exe windows:4 windows x86 arch:x86
28d3fad68d415658bd0a759a68aea87d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
ord526
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
.teet Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.daee Size: - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ