Static task
static1
Behavioral task
behavioral1
Sample
5595f3009f7b65c03d767d5fd97c1676.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5595f3009f7b65c03d767d5fd97c1676.exe
Resource
win10v2004-20231222-en
General
-
Target
5595f3009f7b65c03d767d5fd97c1676
-
Size
66KB
-
MD5
5595f3009f7b65c03d767d5fd97c1676
-
SHA1
f90a151a0443a0c1e83b357551ccbc5f43aaa9cc
-
SHA256
eeb768dc1d076566a0cbc25620a6d10053ad82e7b3543d215c9e518f7f8032df
-
SHA512
caecaaba93168da21f5cb12f0760d4a189deff07b9223bb96fde5664f146f9ebc06291260391761c06d54abda613626be92f94fa4b589bce1d98eaece829620d
-
SSDEEP
1536:l7sOedJZN7wEWhJ2aoZXe7VqYz/Pi7sqHFdKtI97:l7F07wpZ7T3zCFdz5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5595f3009f7b65c03d767d5fd97c1676
Files
-
5595f3009f7b65c03d767d5fd97c1676.exe windows:4 windows x86 arch:x86
481b64b1fc292959930fca610d4472a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord631
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord537
ord644
ord573
ord685
ord578
ord100
ord616
ord618
ord581
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE