Static task
static1
Behavioral task
behavioral1
Sample
080a0b69cbbf5b3714327dde30cc30a3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
080a0b69cbbf5b3714327dde30cc30a3.exe
Resource
win10v2004-20231215-en
General
-
Target
080a0b69cbbf5b3714327dde30cc30a3
-
Size
460KB
-
MD5
080a0b69cbbf5b3714327dde30cc30a3
-
SHA1
43cfc750efa4c93cf44130bf6505ef360647971c
-
SHA256
c2565c7a6e4e8b27dd49a1f8fcb32dd26f1e6e8aebbb40dfc72e084c240270e2
-
SHA512
2a6bf6524ae10ce4b32047082f2c94e7d19e59bdffec2e28824dcb1da6228bf49830162838bd2236f4f91ebd1f493f0e8fbcf9d36167701e2253871a9fcbd731
-
SSDEEP
12288:W22ALSjAxYk7ce+n7pQR9dtSamzHT7q6j:oZAxZf+n7qzSamzHy6j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 080a0b69cbbf5b3714327dde30cc30a3
Files
-
080a0b69cbbf5b3714327dde30cc30a3.exe windows:4 windows x86 arch:x86
aa93584a381540036d318e3add56e8e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord697
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord712
ProcCallEngine
ord644
ord100
BASIC_CLASS_AddRef
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 368KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ