Static task
static1
Behavioral task
behavioral1
Sample
046e677f5b8f2bb68de610dbe4e2be9d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
046e677f5b8f2bb68de610dbe4e2be9d.exe
Resource
win10v2004-20231222-en
General
-
Target
046e677f5b8f2bb68de610dbe4e2be9d
-
Size
24KB
-
MD5
046e677f5b8f2bb68de610dbe4e2be9d
-
SHA1
2e00f6f8865621ddeea74b5c8462d3a7cf6c89f1
-
SHA256
06c7787f9b6ddbe6760c53c22f5347832c0fefa27380bcd5acb201c05559b3dd
-
SHA512
aaea21b438b00b380dbf2b0f61689dc387e8511c11d2e495816ecc82643cad124654c1d5a78431d90c9c5e5dee705448dbefc1cd2b64afe1a8f45a55dc7788b6
-
SSDEEP
192:N4NyB/I6Sn0K28ouhX3P6ctzB0U6o24IDn+:N48Bg6Sn0KdHJyU6oTIDn+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 046e677f5b8f2bb68de610dbe4e2be9d
Files
-
046e677f5b8f2bb68de610dbe4e2be9d.exe windows:4 windows x86 arch:x86
f2571f28a4bd18746b0afda374551616
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord665
ord631
DllFunctionCall
__vbaExceptHandler
ProcCallEngine
ord537
ord644
ord100
ord581
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ