Static task
static1
Behavioral task
behavioral1
Sample
2512983cbf04d2125ad3cf6a65daab1f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2512983cbf04d2125ad3cf6a65daab1f.exe
Resource
win10v2004-20231222-en
General
-
Target
2512983cbf04d2125ad3cf6a65daab1f
-
Size
943KB
-
MD5
2512983cbf04d2125ad3cf6a65daab1f
-
SHA1
a2874bdfd45597c0f9d2b1200d101ed1e2170776
-
SHA256
9565ccff8ee3e9563c428fd942530c148b2436c435663de5e4017f102a76f228
-
SHA512
630f0364b1b4b99eb2a64e2cfc267f683b806e19b6edbc5b2bef1e4f42c2591d11fcef175696f4c797e62bf552d09b5c9cfa1c8e53bf57deb171e144b2f03f33
-
SSDEEP
1536:sZi++kEb8fviVLS1tTXjcfXMWwD1y0MjI9YKpzOCVqz3lgHyWvqUwj2Pfz4ZzfxS:sH/qOuO1ydsd+3iSWbwj2OmhLB9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2512983cbf04d2125ad3cf6a65daab1f
Files
-
2512983cbf04d2125ad3cf6a65daab1f.exe windows:4 windows x86 arch:x86
5f8db64747dff4c57e0ad4e1ad2142d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100
Sections
.text Size: 932KB - Virtual size: 932KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE