Static task
static1
Behavioral task
behavioral1
Sample
04e9b523e77e855f242da796c5d3c6cc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04e9b523e77e855f242da796c5d3c6cc.exe
Resource
win10v2004-20231215-en
General
-
Target
04e9b523e77e855f242da796c5d3c6cc
-
Size
31KB
-
MD5
04e9b523e77e855f242da796c5d3c6cc
-
SHA1
861d39b75c2555f2b69a3bb01d1a88617aeece71
-
SHA256
50ec8d0e08086bb4ede7faa867ad9d3e23f716736fbc7cbd915ed563fa168c8b
-
SHA512
cae1e321ed31b9c93da88de19964d539e5572443a6c358aaef13c75f91687c950dcd524f3abe168a40ef2889dd66a92de270de7233e726bc3e9a73f59c015579
-
SSDEEP
768:LiAnNpOHT9gseyDHFszQrYhlKifydACA2SU2dL:LPIYKiqdtAjUeL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04e9b523e77e855f242da796c5d3c6cc
Files
-
04e9b523e77e855f242da796c5d3c6cc.exe windows:4 windows x86 arch:x86
c4a7cda09b9aa849379ebfb4bc3e0c17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord606
ord608
ord717
ProcCallEngine
ord537
ord644
ord578
ord100
ord616
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ