Static task
static1
Behavioral task
behavioral1
Sample
3c46ea95d8f149581a0cfef6024ae98d.exe
Resource
win7-20231215-en
General
-
Target
3c46ea95d8f149581a0cfef6024ae98d.exe
-
Size
212KB
-
MD5
3c46ea95d8f149581a0cfef6024ae98d
-
SHA1
e1fe8adca14d2a5258b39f0f892535f0ae3beb50
-
SHA256
a3492a144435b4feb4e5e105c04289c34df813b55ddba849add3bd35025e9151
-
SHA512
f49b3aef3c2afe5d11b9dac36a2dbaaf907ece271493f1080d50120c30511e9328d096943acb906c27d8bf3d3363c6d8e35859651da103ab9ad7619223f5ca33
-
SSDEEP
3072:CIdcFLEdskgrt05bnwhVh6PTP8fclEDVOIpagvS4uAOyF2fyQ:vWjZ0xCVh6AElgHdS/ycF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c46ea95d8f149581a0cfef6024ae98d.exe
Files
-
3c46ea95d8f149581a0cfef6024ae98d.exe.exe windows:4 windows x86 arch:x86
fc39d6bcccc6aed12cc7b3f6f5003c3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE