Static task
static1
Behavioral task
behavioral1
Sample
62b86402f3a3e6db0665ea8238759736.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
62b86402f3a3e6db0665ea8238759736.exe
Resource
win10v2004-20231215-en
General
-
Target
62b86402f3a3e6db0665ea8238759736
-
Size
26KB
-
MD5
62b86402f3a3e6db0665ea8238759736
-
SHA1
ec9c5dfb58efd6ebfffe9061674652a466d28d74
-
SHA256
e75b49ce8140f215a160d6bf6b69deb160bb41d43526a6afb33648f49f38e414
-
SHA512
8533e26a8ae6ee3c9dc14f49cd70c29e6150103d27990d75b37d13d60f9c243fb561e42233466e6eeb92a13e1476186fb9996e9b17fa22e1d4b2a7de4a5ee7ce
-
SSDEEP
384:sC+HCFAg2xNOPZcvZvhgXqZqRf9d2ZyFYBAKAVtNx+AhU9YvcS2uosnUXO+tje8x:szCFAHkcdhgXqSfjnI+7xOsPRMje8erO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62b86402f3a3e6db0665ea8238759736
Files
-
62b86402f3a3e6db0665ea8238759736.exe windows:4 windows x86 arch:x86
2bd8d8ffbe2bd41930a5262fc5f05de0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
msvbvm50
__vbaStrI2
Sections
pec1 Size: 21KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec3 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec4 Size: 2KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ