Static task
static1
Behavioral task
behavioral1
Sample
5750170d250324545c42ad33ed1eee38.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5750170d250324545c42ad33ed1eee38.exe
Resource
win10v2004-20231215-en
General
-
Target
5750170d250324545c42ad33ed1eee38
-
Size
58KB
-
MD5
5750170d250324545c42ad33ed1eee38
-
SHA1
779f82ba4b9d242fd584507c22392ab73c8412af
-
SHA256
9ce9e7cae46c523373d54f11fa5b0377917845c6695b872abe90fcaac4f0a296
-
SHA512
52854b010b375b2728d4a94d1c81cc9beea8ed8b4df5bbc052d40c34ecc3998565b4ba18edaad04d0dbf53fb866f4c2ce24a7b98fce6d5017206bb6532ed4cac
-
SSDEEP
768:2FOvFOGl/FFOsXbG/p0Gd3Yn5ZNy3lKGdy+/tT/awjV:ds62sLIGGd3+3Ny1JEmb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5750170d250324545c42ad33ed1eee38
Files
-
5750170d250324545c42ad33ed1eee38.exe windows:4 windows x86 arch:x86
32de330adec1d4d338e154c0983a5f72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord621
ord516
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord648
ord570
ord578
ord100
ord616
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ