Static task
static1
Behavioral task
behavioral1
Sample
664fdda40050b0711f48d83e93cb3ed8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
664fdda40050b0711f48d83e93cb3ed8.exe
Resource
win10v2004-20231222-en
General
-
Target
664fdda40050b0711f48d83e93cb3ed8
-
Size
52KB
-
MD5
664fdda40050b0711f48d83e93cb3ed8
-
SHA1
6c218a5ca738552f419a20c34bfb5c0ad7b27e7c
-
SHA256
8e113f267bd35c9a8bf85e14676667614afcbe3839b689ae06b41830c7c21e77
-
SHA512
ba661031f0279ea814e9ae1fc41aed1f185e64d6af6e681d4c86474d94f8929acc864503d2bf12203cfe03e157b447420bfd6de2512ba18416c4a090a027f9b6
-
SSDEEP
768:OWQmGV2VV9o2z8ppzVKmT2Gme/Yud/yLO46P53bdG:OWQ3iz8pemTy4s6P6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 664fdda40050b0711f48d83e93cb3ed8
Files
-
664fdda40050b0711f48d83e93cb3ed8.exe windows:4 windows x86 arch:x86
ca647a3977795872f36236c40ef017da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ