Static task
static1
Behavioral task
behavioral1
Sample
558d1690ec8d124be3ad726a390b9450.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
558d1690ec8d124be3ad726a390b9450.exe
Resource
win10v2004-20231222-en
General
-
Target
558d1690ec8d124be3ad726a390b9450
-
Size
12KB
-
MD5
558d1690ec8d124be3ad726a390b9450
-
SHA1
41a5a8847f53cee816e2d08f6193066ec15a880a
-
SHA256
6e0a63b7db985829fb4746c11c986399a265d85329ea7da943b6521261a8a7c2
-
SHA512
9f6dbdef5decbd63ea7a83b08ef4d9bd092c0b9cf486a1c76376d4ad7cba780980dde9bf3c7568e7d4a8ad33a7edbd818b467a217c59cdced008244855a65c06
-
SSDEEP
48:ygAt6PXv7m26HlvPgUics8yrue4A/oglwR0EfK2:RfvX6FvDe4T0Ei2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 558d1690ec8d124be3ad726a390b9450
Files
-
558d1690ec8d124be3ad726a390b9450.exe windows:4 windows x86 arch:x86
bad91fed9dab58de0ae1f264dc5a5268
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord666
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ