Static task
static1
Behavioral task
behavioral1
Sample
7bd93231e937f32086975130013b2cf4.exe
Resource
win7-20231215-en
General
-
Target
7bd93231e937f32086975130013b2cf4
-
Size
315KB
-
MD5
7bd93231e937f32086975130013b2cf4
-
SHA1
ec369ca4c511bc40fffed05b338acca1e9fe3d07
-
SHA256
6e68351951bca56fbdb6b4c7e58dd8a3d2a853d930ecd0180434b2f8246678d5
-
SHA512
0b8aa4a4d9dc2999d6f60bbdd47ad268de56d7e81a8b8894868128cb70227954263f4e216045fa4dd20adf835e717d5bb9a0a6e8424e73fe724d699351520204
-
SSDEEP
6144:gFIPml0XwSMaj3+634OcZU5h7KlvYSM1Gsy/Y6OinHhJvS3lIkdl77:gF1eXwxk3+kcU70vYl1GsiYrCBS3lIkv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bd93231e937f32086975130013b2cf4
Files
-
7bd93231e937f32086975130013b2cf4.exe windows:4 windows x86 arch:x86
01bc1f62c7c3666eaf1a8b8d5f7c4d1b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
.���� Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.���� Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.����� Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
�̘̑� Size: - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ