Static task
static1
Behavioral task
behavioral1
Sample
7280de629c543873b3f81809edf4f8fe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7280de629c543873b3f81809edf4f8fe.exe
Resource
win10v2004-20231215-en
General
-
Target
7280de629c543873b3f81809edf4f8fe
-
Size
264KB
-
MD5
7280de629c543873b3f81809edf4f8fe
-
SHA1
8ef3e90409d2020b5e45456167d5875077b79a9c
-
SHA256
e2602100dd2b002ba3916e0e3c4ffcec4be5302e5287bf86630e24a04b8eb729
-
SHA512
9f3e0427f3af932062580c087fd4d925d568b8947b35ae21f74f1115cd0a36230df9988b2a685bb0fe534d66455d61ca3f52d2cad3952b9b8116dd2f9549f91b
-
SSDEEP
3072:mU2VclLvYUyR7jNicaJu1AqMB2ilB1p9N1AMF+Pz4TigmPpKPo5VpJKD3Ek5EgXc:mU2c6ichsBTn+re6WqVpQ9J73Rj0Bi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7280de629c543873b3f81809edf4f8fe
Files
-
7280de629c543873b3f81809edf4f8fe.exe windows:4 windows x86 arch:x86
4c190c17ed62ac0de5df08353e6932ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaAryMove
__vbaFreeVar
__vbaLenBstr
__vbaLateIdCall
__vbaStrVarMove
__vbaFreeVarList
__vbaPut3
_adj_fdiv_m64
__vbaRaiseEvent
__vbaFreeObjList
ord516
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaVarForInit
__vbaExitProc
__vbaObjSet
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord49087
ord703
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
ord608
__vbaFPException
ord717
__vbaUbound
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaVar2Vec
__vbaNew2
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
__vbaPowerR8
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarAdd
__vbaVarDup
__vbaFpI2
__vbaVarMod
__vbaFpI4
__vbaVarCopy
_CIatan
__vbaStrMove
__vbaR8IntI4
_allmul
__vbaLateIdSt
_CItan
__vbaVarForNext
_CIexp
__vbaMidStmtBstr
__vbaFreeObj
__vbaFreeStr
ord581
Sections
.text Size: 228KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ