Static task
static1
Behavioral task
behavioral1
Sample
5d33c322377cb4b89775ffa337deb742.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5d33c322377cb4b89775ffa337deb742.exe
Resource
win10v2004-20231222-en
General
-
Target
5d33c322377cb4b89775ffa337deb742
-
Size
40KB
-
MD5
5d33c322377cb4b89775ffa337deb742
-
SHA1
aea42fe333fcf54ebd34498bc77cfad496ebb870
-
SHA256
e3526667d9233c9a5aecd8695340afe707afc656d14b6893ca4e7228b3a0adf5
-
SHA512
12d886e856f99c1014977d1442a262471010ff60a3d5993ce1d403ed85eed10e84a3dd015fb0a17bca6765d3b412d19247818276928f172a6d4a0c221fab027e
-
SSDEEP
768:nnBCpGL+7vWWutoPsSESMuFqIRKUKBcgSMkXKy:nREZfxRwby
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d33c322377cb4b89775ffa337deb742
Files
-
5d33c322377cb4b89775ffa337deb742.exe windows:4 windows x86 arch:x86
273ed5aec88df3fa6e163769fa99f6d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
BASIC_CLASS_AddRef
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ