Static task
static1
Behavioral task
behavioral1
Sample
6446fa01c1b8f3c448abedb05afc3f15.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6446fa01c1b8f3c448abedb05afc3f15.exe
Resource
win10v2004-20231222-en
General
-
Target
6446fa01c1b8f3c448abedb05afc3f15
-
Size
872KB
-
MD5
6446fa01c1b8f3c448abedb05afc3f15
-
SHA1
53c7b93159f6c1d2074a8f1e658ffdd02e4947d2
-
SHA256
dbe6b0e280657e8b1f172ecb86ee5e2a1582d5abd7a8936bce2e7fc926351b44
-
SHA512
76cdfa8f70fa9e68af38e948df5b484c2488389fb5d720d2fa63351b73eed4e11d1d54fda8b6cfe29e2c3269145e2fff1ef5be973ff2ae617350fcfaf9babd62
-
SSDEEP
24576:byxjBr3ycU9JgdUE7kvEoUugVfMoPIXmS:bA3o9KLARMVf9IXmS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6446fa01c1b8f3c448abedb05afc3f15
Files
-
6446fa01c1b8f3c448abedb05afc3f15.exe windows:4 windows x86 arch:x86
65ac34bea74117a56b509319a2e4b7d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 864KB - Virtual size: 863KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ