Static task
static1
Behavioral task
behavioral1
Sample
1c78b76f087cc32a4f559af53eb3348b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1c78b76f087cc32a4f559af53eb3348b.exe
Resource
win10v2004-20231222-en
General
-
Target
1c78b76f087cc32a4f559af53eb3348b
-
Size
16KB
-
MD5
1c78b76f087cc32a4f559af53eb3348b
-
SHA1
493caedd89536f16557c61f32945db789d6cbc45
-
SHA256
469faf2b800eaa12aca3fa05132e5deb75f028b56bbd5e0b1ccd4aef422a48bd
-
SHA512
481879830118734893e48c0249231f99a50493e321146077832f5b2142f2bf2f2f8e321adf0ffae3255e1805b402f77651a13e3796fc1050f89f567de5d3ef1e
-
SSDEEP
192:+2K/5G9wRRtvROd++7iJRGtt9nCE7FvpjthE:J25G2pZE+IiJDSu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c78b76f087cc32a4f559af53eb3348b
Files
-
1c78b76f087cc32a4f559af53eb3348b.exe windows:4 windows x86 arch:x86
66778983babf08e6be0810f9235049f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord666
ord631
ord526
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord716
ProcCallEngine
ord644
ord537
ord570
ord576
ord100
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ