Static task
static1
Behavioral task
behavioral1
Sample
020cd5a22444a9ddad5ea7fa8aad96ca.exe
Resource
win7-20231215-en
General
-
Target
020cd5a22444a9ddad5ea7fa8aad96ca.exe
-
Size
472KB
-
MD5
020cd5a22444a9ddad5ea7fa8aad96ca
-
SHA1
bdd980a30b8f5b841c8462f316c0c6da39d20d8c
-
SHA256
30381f11294fa3862148d8ae3e5d28ba62223a6a3baae6a4abd9c87e00bfd575
-
SHA512
8b66380e3a7f15e2107c7400b850e848bfe8725d9738ef55bdb2e9200ee21ab3389c3c0e750049fa1c2f1a2794a8c8361a44b618880c37dcde07e70b48064376
-
SSDEEP
6144:EYcAKFkXDRE74Maq1XAydhgt9Kre7QqlBsL0S06Ysi7c4rsIbPB/wQ1E:EYcrKE74AXAS0UeEC0GEiv/bz1E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 020cd5a22444a9ddad5ea7fa8aad96ca.exe
Files
-
020cd5a22444a9ddad5ea7fa8aad96ca.exe.exe windows:4 windows x86 arch:x86
c2e599f24f3b03ecf8134af02184e19d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaVarMove
__vbaAryMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
rtcInputCharCountVar
__vbaFreeObjList
rtcAnsiValueBstr
_adj_fprem1
__vbaRecAnsiToUni
__vbaStrCat
__vbaRecDestruct
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaExitProc
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaVarIndexLoad
_CIsin
__vbaErase
rtcMidCharVar
__vbaChkstk
__vbaFileClose
__vbaGenerateBoundsError
DllFunctionCall
_adj_fpatan
__vbaRedim
__vbaRecUniToAnsi
rtcArray
__vbaUI1I2
_CIsqrt
__vbaExceptHandler
rtcSplit
rtcReplace
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
rtcFileLength
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
__vbaPowerR8
_adj_fdiv_r
ThunRTMain
__vbaI4Var
__vbaAryLock
__vbaVarDup
__vbaStrToAnsi
__vbaFpI4
__vbaVarCopy
__vbaRecDestructAnsi
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr
Sections
Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE