Static task
static1
Behavioral task
behavioral1
Sample
fb13d646fb7231620677810c34294ee2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fb13d646fb7231620677810c34294ee2.exe
Resource
win10v2004-20231215-en
General
-
Target
fb13d646fb7231620677810c34294ee2
-
Size
304KB
-
MD5
fb13d646fb7231620677810c34294ee2
-
SHA1
84e0556bfcc3c40cfe1e9ead183a8048e0ca19f6
-
SHA256
a458ebab9dda55b96012efad9254a73f262b49d0e56549a10bbdd79c3eab7fe8
-
SHA512
2bb71ae153b5148b00293d8d7baa987acddb90da70754582be5c990db27880a699ea6b2ac19275ab51c26f5f8b68c20d90c212f000be6c007c7cf85fa67efde5
-
SSDEEP
6144:FsatEt/FdCB1eUf8TVCxQorM6jMRsmI50Rfm:nEt/FdCB1eUf8CxQoXj9T++
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb13d646fb7231620677810c34294ee2
Files
-
fb13d646fb7231620677810c34294ee2.exe windows:4 windows x86 arch:x86
14dd6ff8a184c00a90634707faf84c61
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
__vbaVarMove
__vbaFreeStr
__vbaStrR8
__vbaStrI2
__vbaStrVarMove
_adj_fdivr_m32i
ord665
__vbaVarVargNofree
__vbaVarZero
_CIsin
__vbaStrCat
ord632
_allmul
_adj_fdiv_r
__vbaI4ErrVar
_CIatan
__vbaFreeObj
__vbaFreeVarList
ord100
__vbaErrorOverflow
__vbaLbound
__vbaAryMove
__vbaAryLock
__vbaNew2
_adj_fdiv_m32i
__vbaGenerateBoundsError
ord696
__vbaI4Str
_adj_fdiv_m64
__vbaLenBstr
__vbaFPException
__vbaStrVarVal
_adj_fdivr_m16i
__vbaDerefAry1
__vbaI2Str
__vbaHresultCheckObj
__vbaFreeStrList
_adj_fptan
__vbaUI1I2
_CItan
_adj_fprem
__vbaRedim
__vbaAryCopy
ord608
__vbaUbound
EVENT_SINK_Release
_adj_fdivr_m32
DllFunctionCall
EVENT_SINK_QueryInterface
__vbaChkstk
EVENT_SINK_AddRef
__vbaExceptHandler
__vbaStrCopy
_CIexp
__vbaLenBstrB
__vbaStrMove
__vbaAryDestruct
_adj_fdiv_m16i
__vbaFreeVar
ord644
__vbaErase
_adj_fpatan
__vbaAryConstruct2
_adj_fdivr_m64
ord516
__vbaSetSystemError
__vbaAryUnlock
_adj_fdiv_m32
ord628
_CIsqrt
__vbaR8Str
__vbaFreeObjList
__vbaUI1ErrVar
__vbaVarAdd
_CIlog
__vbaCopyBytes
_CIcos
_adj_fprem1
Sections
.text Size: 284KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ