Static task
static1
Behavioral task
behavioral1
Sample
0ae2ca11b0e66a6bdc57ce97fea658d8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ae2ca11b0e66a6bdc57ce97fea658d8.exe
Resource
win10v2004-20231215-en
General
-
Target
0ae2ca11b0e66a6bdc57ce97fea658d8
-
Size
47KB
-
MD5
0ae2ca11b0e66a6bdc57ce97fea658d8
-
SHA1
989db7558e0a3e70f5f8c6e4d7d57147fe8ac298
-
SHA256
e04602daefc034093514d6fa98c0a1feba144a50d60c569696b33c7a3fa05dbb
-
SHA512
2d0bee4d69130d26b3ea6955322af81b23dddd31408325fec7df2df8a8406cf9ff94e94eff9860afef38be4422d929480fe6f41b92afc653f26deb2534b13c39
-
SSDEEP
768:gJcrH5kx9GEXwFrp8mfDs9kPyqyYs6NGI6rKouzrI:QcTSxJWd3sayY1QHrKouzs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ae2ca11b0e66a6bdc57ce97fea658d8
Files
-
0ae2ca11b0e66a6bdc57ce97fea658d8.exe windows:4 windows x86 arch:x86
ae412ed9d50f0e004aa5f90efbfe72df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
ord667
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord681
ord100
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ