Static task
static1
Behavioral task
behavioral1
Sample
380278f19a33395de88bd1ea68174644.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
380278f19a33395de88bd1ea68174644.exe
Resource
win10v2004-20231215-en
General
-
Target
380278f19a33395de88bd1ea68174644
-
Size
95KB
-
MD5
380278f19a33395de88bd1ea68174644
-
SHA1
f7cfc70e37cad05063aeaca78476231f460db378
-
SHA256
c2390945504fdb618ed9155d988d9aab7ed5bdb180dbafe1c5c0551e1b544cad
-
SHA512
fba30bca48bdae4fe8aaa7a8adb8f1956e2ec71bedb100a9c49e5b01715bc09f3818ef1113b2faf4edb12593ccaa1ea069daa541d11c209d473b08e0d9327a84
-
SSDEEP
768:3UaA6KtlPNUNeOPk9HvTlWDLt4/BRL/C3:3UaPKXKwOPkZvTK93
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 380278f19a33395de88bd1ea68174644
Files
-
380278f19a33395de88bd1ea68174644.exe windows:4 windows x86 arch:x86
886052a1d41a664081b21f93794bb1e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord517
ord593
ord594
ord595
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord573
ord681
ord100
ord616
ord617
ord618
ord581
Sections
. Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lmZb9Y Size: 7B - Virtual size: 7B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.41iTYL Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size:
Size: - Virtual size: