Behavioral task
behavioral1
Sample
262d829939227c2f1992eccab937331a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
262d829939227c2f1992eccab937331a.exe
Resource
win10v2004-20231215-en
General
-
Target
262d829939227c2f1992eccab937331a
-
Size
84KB
-
MD5
262d829939227c2f1992eccab937331a
-
SHA1
77e710e12e50478c568f6cecf5fb4e2bc1bb8466
-
SHA256
81fa6cac8d61cd5c3feb526871768cbfcc0b45c4244f0ebb54db463871b8a777
-
SHA512
a6ff70b2692b1429310a987e08bad032d0dc4884df1d7831579eb2b75549e9da93b3003cd05fec0c525693ec83ccb5c037c516efe1ec798b0a0827817f9358d3
-
SSDEEP
768:4mqDZIroprB1upVuIMWaGi302f5uNP2NAXZ2/hVDrGjtXtItwbRz4TPgWycy0zLK:DQpF1urgGi3KNPRXZ2/5DnMuLiG6vT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 262d829939227c2f1992eccab937331a
Files
-
262d829939227c2f1992eccab937331a.exe .js windows:4 windows x86 arch:x86 polyglot
d802e0ed02a19bd594dbe8179846a1a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE