Static task
static1
Behavioral task
behavioral1
Sample
237bbad7125c3ffc70611b9e2ecc3435.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
237bbad7125c3ffc70611b9e2ecc3435.exe
Resource
win10v2004-20231215-en
General
-
Target
237bbad7125c3ffc70611b9e2ecc3435
-
Size
76KB
-
MD5
237bbad7125c3ffc70611b9e2ecc3435
-
SHA1
35b7dfe15a71e35a74561bdad9f0917094f0d337
-
SHA256
e499a681c7d93b0835376c458d2f79b06fe4abb8a9e11fd0ee1d16c4e543f413
-
SHA512
596f3c63ec32dc709def0b39f6b0166524102d4aa07bec0ff346b656f49c4c6d349014f75994f368a5f1cd8c9d88a5359085007e7d7117ae3a698b2df6de586f
-
SSDEEP
1536:eznF3oYdGt2JGo4/8x44Hv0D7nMm2rsdF0XR0YaM:M3odh0viyYdF6R5aM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 237bbad7125c3ffc70611b9e2ecc3435
Files
-
237bbad7125c3ffc70611b9e2ecc3435.exe windows:4 windows x86 arch:x86
196a63f81b2c89689a3c53f046941523
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord572
ord681
ord685
ord578
ord100
ord581
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ