Static task
static1
Behavioral task
behavioral1
Sample
718c81b67ac3e2126bc57ff0e9a637b3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
718c81b67ac3e2126bc57ff0e9a637b3.exe
Resource
win10v2004-20231215-en
General
-
Target
718c81b67ac3e2126bc57ff0e9a637b3
-
Size
24KB
-
MD5
718c81b67ac3e2126bc57ff0e9a637b3
-
SHA1
8e543c89ef2c93a83a68983a39613e7e734c7dba
-
SHA256
32cfb08a64a84fcfd1525ecc22a05490ed58a1633fa930dd814b82f9ed27903e
-
SHA512
dcae95c38c84a436d51b4e4581f6f9987d8bc451b2acd262e98e5eb004fffc19f054b670474c6d7fb1202af344de342ebf659dc9576a87fa194b9c8a9ef08cd4
-
SSDEEP
192:E214T+9dE7Ulvkgp/verDz7AtJUMGw0/cdtmP2kyjHo3TWjVja/qxw:9KgvkI/v8DPAtuyjI3TuVjaixw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 718c81b67ac3e2126bc57ff0e9a637b3
Files
-
718c81b67ac3e2126bc57ff0e9a637b3.exe windows:4 windows x86 arch:x86
3632b98482f94ef2233f19b7d33f234b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord187
MethCallEngine
ord516
ord306
ord307
ord709
ord631
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord714
ord717
ord318
ord533
ProcCallEngine
ord644
ord100
ord616
ord581
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ