Static task
static1
Behavioral task
behavioral1
Sample
7080ee5c139c1e7ce9c92f70dab1df27.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7080ee5c139c1e7ce9c92f70dab1df27.exe
Resource
win10v2004-20231215-en
General
-
Target
7080ee5c139c1e7ce9c92f70dab1df27
-
Size
296KB
-
MD5
7080ee5c139c1e7ce9c92f70dab1df27
-
SHA1
f4ae1f11299de5d71f50b6269605a197ee46f2c8
-
SHA256
35bf0cf1b4ccf458e9ce86a74ba50550cecca8ebc6356f763f903508646e4b70
-
SHA512
09445b67c45253e530943e5f768d277706966bc06e407ffc69d207f7e48d73cb3c62d3f8c3306eef4494ec76c243bdac3959ab36aca6b09604c8663ab8fe8f9b
-
SSDEEP
3072:OSUy6/Y+7ccNqvPuEM9XbR1+aJe1mgawzxsBub861jIHxowCOkkW99iCmkCmtRo+:OzdHbRUTV5njOkkCNORUTV5nKkT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7080ee5c139c1e7ce9c92f70dab1df27
Files
-
7080ee5c139c1e7ce9c92f70dab1df27.exe windows:4 windows x86 arch:x86
0425e8b32935cd0c8e216695509d5e63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord573
ord681
ord100
ord617
ord618
ord619
ord650
ord581
Sections
pec1 Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE