Static task
static1
Behavioral task
behavioral1
Sample
709d6a108048df7a866b023505e76052.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
709d6a108048df7a866b023505e76052.exe
Resource
win10v2004-20231215-en
General
-
Target
709d6a108048df7a866b023505e76052
-
Size
24KB
-
MD5
709d6a108048df7a866b023505e76052
-
SHA1
b64c0feb22268ee67462ab8eb7a3c1dbe0f037a4
-
SHA256
e4e881a7b1af2580a1f48dcb2f7552a3ddf7959b74e48e670a81e01c083bb398
-
SHA512
c358cc90439335c9d6893107aad86a1dc10f1881ca332541ddb601284e1f37bf628eee965651ebbee8accaebb391f7e8ff4d5c9f64e742a8420f8134341c1a74
-
SSDEEP
192:XRQKbzbcK1lM/LCaVF72EMXRQKbzbcK1lM/LCaVF72EMo:rQLCaXMrQLCaXMo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 709d6a108048df7a866b023505e76052
Files
-
709d6a108048df7a866b023505e76052.exe windows:4 windows x86 arch:x86
97ebeccd84140b423b6fb5aae9e46ed9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord518
ord598
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ProcCallEngine
ord570
ord100
ord616
ord581
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ