Static task
static1
Behavioral task
behavioral1
Sample
f8721647972170065466ab1b86138dab.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f8721647972170065466ab1b86138dab.exe
Resource
win10v2004-20231215-en
General
-
Target
f8721647972170065466ab1b86138dab
-
Size
40KB
-
MD5
f8721647972170065466ab1b86138dab
-
SHA1
4995e60087c3ae364676fd6bc8047636464392cd
-
SHA256
dd9fd9b15aa4ee2b4cff7ef73bfa660512323af7803b81bfe58fe8a512edd239
-
SHA512
aba970f1ac9ac9f77c93a6d47699a5657edd24ecca74b53fad24b87f4d0b2b155931663123ce05f2ce2feda5a6e4a6f4d103ba253a28fa24cf67958ce777817d
-
SSDEEP
768:RDzJ0L5KTDiN91jfwEVSFWFKFrgzhlswl8rerm7Jf7/Jl:RQca91jfwEVaUJmVDhl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8721647972170065466ab1b86138dab
Files
-
f8721647972170065466ab1b86138dab.exe windows:4 windows x86 arch:x86
18c4c7849bf21a17c4a58468af0b5362
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord665
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord100
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ