Static task
static1
Behavioral task
behavioral1
Sample
3758855d21ee2c4ab924db52a47ea0c9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3758855d21ee2c4ab924db52a47ea0c9.exe
Resource
win10v2004-20231215-en
General
-
Target
3758855d21ee2c4ab924db52a47ea0c9
-
Size
43KB
-
MD5
3758855d21ee2c4ab924db52a47ea0c9
-
SHA1
db2f6fc18a8ca9c976c3e6ccdedfc95c83313f13
-
SHA256
28b676f7bee6a53015866bf0b1fe99a26a83f7267350329a73630b78b49f0ed4
-
SHA512
b871e9a6350403ff43bdc2e92305fe1ea8c55113063eb4054e80ec20ea760d6fafa5554d4153aab6cc02bb69c6df50e69ebbca8a7e9147ca33a1a6da940fb00e
-
SSDEEP
768:0XhIP+32cjDkblBzKzTSR0SqNZj633DXBw0VUZ1I3eLw6RSLw6PyiSBb0+n:0OYhyiSqNZ+nDX5OQ3sw6RAw6KioVn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3758855d21ee2c4ab924db52a47ea0c9
Files
-
3758855d21ee2c4ab924db52a47ea0c9.exe windows:4 windows x86 arch:x86
0366c2f296522fd19ff3e683a47f5782
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord681
ord100
ord616
ord619
ord581
Sections
.TEXT Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ