Static task
static1
Behavioral task
behavioral1
Sample
198acd3d3effca76512423e08a3b8810.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
198acd3d3effca76512423e08a3b8810.exe
Resource
win10v2004-20231215-en
General
-
Target
198acd3d3effca76512423e08a3b8810
-
Size
16KB
-
MD5
198acd3d3effca76512423e08a3b8810
-
SHA1
22a76eed160eeee8588920840fdee3740171b698
-
SHA256
e0bea0fa5bc4a9ad9988661e23f2fc9006d2b1a2a30ed68a3f91cdff61b68f1a
-
SHA512
4ff4548eda5d1b56a5ae457de66c1a810c90288d05b12d5d5505331bb37e915e11718069764430913b080f0d0a1a5bf3570eb4fb9d36e9cd822f43dd9f27b67c
-
SSDEEP
96:kj66+1u4pUw8aco4fWEvf23pLrha+8HcOzbZloRF2:/Pvpp74fk3u+wXmF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 198acd3d3effca76512423e08a3b8810
Files
-
198acd3d3effca76512423e08a3b8810.exe windows:4 windows x86 arch:x86
58b5bb7cbc5dae38c3376feedf480664
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord626
ord593
ord594
ord595
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord576
ord100
ord580
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ