Static task
static1
Behavioral task
behavioral1
Sample
0d6852a833cbb4b93d2516f5020ea728.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0d6852a833cbb4b93d2516f5020ea728.exe
Resource
win10v2004-20231215-en
General
-
Target
0d6852a833cbb4b93d2516f5020ea728
-
Size
12KB
-
MD5
0d6852a833cbb4b93d2516f5020ea728
-
SHA1
ad07851a17df243a3dfef1f5eb3149a43510a391
-
SHA256
cd16954992f5bf1505becc1c8905b3bea7bc3dd7daf4afedc635380444984230
-
SHA512
2340212534b83437a8d75c86dc89423579526d0c1a73e188e813b58ab6d2e4aec1d8271f9e947bb1b4900704bcf2374915470c3889708f19a29a1df5ff6d55dc
-
SSDEEP
48:ygK9qjhHfrqMQvN+Xgaw6laxro/zoUxmIX6kPGgQ469:qUjFjqMQF+tlaxrokUFX6kuv9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d6852a833cbb4b93d2516f5020ea728
Files
-
0d6852a833cbb4b93d2516f5020ea728.exe windows:4 windows x86 arch:x86
1386307ac66bd30da7a5a6ea2319acad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
ord526
__vbaExceptHandler
ord711
ord716
ProcCallEngine
ord570
ord100
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ