Static task
static1
Behavioral task
behavioral1
Sample
264a4f1da5163ba11190d5b3cab35418.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
264a4f1da5163ba11190d5b3cab35418.exe
Resource
win10v2004-20231215-en
General
-
Target
264a4f1da5163ba11190d5b3cab35418
-
Size
265KB
-
MD5
264a4f1da5163ba11190d5b3cab35418
-
SHA1
c6e81fa82210b02cc29ac9905684e043e5db805e
-
SHA256
49d777aff9d282095b6d8e7d26937d579869056e895c23efefbfea2775937f69
-
SHA512
ff6c9bcf38fc03e01283a213de0f773ab3c5ecc5f7243c36427c4c546e96195bfb6d1f0ca7a44f3efe2fa1932b99bf274f121a121437f74da90c5d3223749774
-
SSDEEP
1536:uOBaF/aHmFoeS2lM2JzIzntnTtO7KsaVsz6+9c6UpirYFYKW+:ueBeFyQzytnTtOGslz6p6BKf
Malware Config
Signatures
Files
-
264a4f1da5163ba11190d5b3cab35418.exe windows:4 windows x86 arch:x86
cd2ccdbbf7ff5ffb1eee7d322c630393
Code Sign
Certificate
IssuerCN=MYTHOIT,OU=Forpagtni,O=Sauces,L=SKNSERKL,ST=grundgr,C=SR,1.2.840.113549.1.9.1=#0c1161756d7564734053616d626f73372e496eNot Before25/07/2021, 20:43Not After25/07/2022, 20:43SubjectCN=MYTHOIT,OU=Forpagtni,O=Sauces,L=SKNSERKL,ST=grundgr,C=SR,1.2.840.113549.1.9.1=#0c1161756d7564734053616d626f73372e496e0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/01/2021, 00:00Not After06/01/2031, 00:00SubjectCN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07/01/2016, 12:00Not After07/01/2031, 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ba:09:f4:3c:51:65:0e:cd:39:48:62:e7:4e:7f:4e:45:a0:6b:ca:6f:32:b8:de:14:61:66:82:de:80:63:06:75Signer
Actual PE Digestba:09:f4:3c:51:65:0e:cd:39:48:62:e7:4e:7f:4e:45:a0:6b:ca:6f:32:b8:de:14:61:66:82:de:80:63:06:75Digest Algorithmsha256PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
_CIcos
_adj_fptan
__vbaFreeVar
__vbaAryMove
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
ord595
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
ord702
_adj_fdivr_m16i
ord705
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
ord529
__vbaStrCmp
__vbaObjVar
DllFunctionCall
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord532
__vbaI2Var
ord536
_CIlog
__vbaNew2
__vbaVar2Vec
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
ord575
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaI4Var
ord611
__vbaStrToAnsi
ord612
__vbaVarDup
__vbaFpI4
__vbaLateMemCallLd
_CIatan
__vbaStrMove
__vbaCastObj
__vbaUI1Str
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
ord580
Sections
.text Size: 220KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ