Static task
static1
Behavioral task
behavioral1
Sample
732c5c94f994c7ff32a3c14a3136d731.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
732c5c94f994c7ff32a3c14a3136d731.exe
Resource
win10v2004-20231222-en
General
-
Target
732c5c94f994c7ff32a3c14a3136d731
-
Size
24KB
-
MD5
732c5c94f994c7ff32a3c14a3136d731
-
SHA1
3cfb35b42be24001caa74ee8492b245c52b9f62b
-
SHA256
e8ba925d5b73ff936c666513e09c121931541d4c9e65fc0820a8fecbd29d956e
-
SHA512
f06bf513b9f6aeae9b481eafa48246632efdca7b7c4e8aa509c0cda2d0adb3401553d3f1021dd037a5ec5bcf0673db10c9c1c6b9d62d5b7ebe5f287085a939ba
-
SSDEEP
384:Z37iR4XBd44E7DXr0bj3Lklb47PIznXQutu+CB:Z3eR4r44E7DXr0bj3Lklbvu+C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 732c5c94f994c7ff32a3c14a3136d731
Files
-
732c5c94f994c7ff32a3c14a3136d731.exe windows:4 windows x86 arch:x86
1c12b66a3fa7f52a0b4fd7fdde1f6263
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord588
MethCallEngine
ord516
ord660
ord597
ord598
ord631
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord609
ord537
ord570
ord100
ord610
ord611
ord612
ord546
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ