Static task
static1
Behavioral task
behavioral1
Sample
0c35d4ba276f923e5a89b39b05ac96e7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c35d4ba276f923e5a89b39b05ac96e7.exe
Resource
win10v2004-20231222-en
General
-
Target
0c35d4ba276f923e5a89b39b05ac96e7
-
Size
5KB
-
MD5
0c35d4ba276f923e5a89b39b05ac96e7
-
SHA1
8f94117869694462ba4d305407aa8fb4bea40e5f
-
SHA256
b57a467a60a992059b139e51085202701c4c95de0caa4db3a25ba226e1bf6051
-
SHA512
1dfc04ee678e4483c56858c3fc295b8a71e46b63f51599e49a71456a5c9afd599e5aea28df91b395b53970ef91b106a31c0e1bc579d0e056a75175d04ea18725
-
SSDEEP
96:CPPEzD9DLOy0X8ExX670aDMpgL5xjv65uv:+E8yvExK6py5xjv65W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c35d4ba276f923e5a89b39b05ac96e7
Files
-
0c35d4ba276f923e5a89b39b05ac96e7.exe windows:4 windows x86 arch:x86
ca77a68ab948994a36286d20a93cf414
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord593
ord594
ord598
DllFunctionCall
ord670
__vbaExceptHandler
ord711
ord608
ord716
ProcCallEngine
ord100
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE