Static task
static1
Behavioral task
behavioral1
Sample
6a39cf8237cdd5e65833032babec07cb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6a39cf8237cdd5e65833032babec07cb.exe
Resource
win10v2004-20231215-en
General
-
Target
6a39cf8237cdd5e65833032babec07cb
-
Size
16KB
-
MD5
6a39cf8237cdd5e65833032babec07cb
-
SHA1
077e1e15c0113ba354ea41a3b912ed90a0f73462
-
SHA256
d00d21e3f3231a88391514e72972c2a9998f529ae045b910079f2d2d89cbc5b2
-
SHA512
900f6c2a5c99a9ab6988f28377ecb0f086c4fc2785ac9cc1ca380c25e33285c133dea12727a82d3e8464f539f5970c70fe323d448dbfc9dc5c7bdb4cea07770f
-
SSDEEP
192:12r5HWHXot6+bYMhnrDLAL3z/68+KYYt7oHKHA3z8o4E:12gJ+bXrDLALjX+RYuqA3n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a39cf8237cdd5e65833032babec07cb
Files
-
6a39cf8237cdd5e65833032babec07cb.exe windows:4 windows x86 arch:x86
47cac94da694cbeb74db29fe5847659d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord593
ord594
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
ord617
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ