Static task
static1
Behavioral task
behavioral1
Sample
1adb35af6d03f8245b7643b6938b1169.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1adb35af6d03f8245b7643b6938b1169.exe
Resource
win10v2004-20231215-en
General
-
Target
1adb35af6d03f8245b7643b6938b1169
-
Size
16KB
-
MD5
1adb35af6d03f8245b7643b6938b1169
-
SHA1
eeca6a8a82ffeac3a20852472623c8db235d9ff2
-
SHA256
a6eee2ce6b5557dc12c3a91fb2fae844ec2e0340348c4e06d8e9a73ce820b618
-
SHA512
d2cd1b6161f9a7305d49e21854361c90334e20a66cb34f2d011606b37c80411f94c3ca94f5b3e7490a4df60c22b59d1c95448a9059544e49c07a1dbea8085191
-
SSDEEP
192:x2uiB6ShbOCm0qkOQELlcYEdH/4hNhGolN2B7/TX2LOF8N2BEz:x7uC/kOQY3hGeIDKOFu2BEz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1adb35af6d03f8245b7643b6938b1169
Files
-
1adb35af6d03f8245b7643b6938b1169.exe windows:4 windows x86 arch:x86
ae6c4d011d8002d6a286bc42590cb096
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord621
ord516
ord631
ord632
DllFunctionCall
ord563
ord601
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord572
ord578
ord100
ord581
Sections
.text Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ