Static task
static1
Behavioral task
behavioral1
Sample
7172a087b99917980baaf5fe8f194d35.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7172a087b99917980baaf5fe8f194d35.exe
Resource
win10v2004-20231215-en
General
-
Target
7172a087b99917980baaf5fe8f194d35
-
Size
320KB
-
MD5
7172a087b99917980baaf5fe8f194d35
-
SHA1
171a7c36e621fd9f5c849ad25f69a0d826e6bd9d
-
SHA256
cabce91cca53818584f6f0355ba7206c4c79e014d2108c27bfa0d9438ee2cb0b
-
SHA512
de9bf84983ce4e9264d0af8263e9864c13ea9fc55e2e99c5124aa1071b2941e82f8f351abcf29d6b88318da9005fe456a48adfbb207e9d7e22745f8a31beed95
-
SSDEEP
3072:r6eKQkyG30hfNsC75BdIENT0mAK8aBjUAeGu2/XlR8J:9HGsTPtQCu2g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7172a087b99917980baaf5fe8f194d35
Files
-
7172a087b99917980baaf5fe8f194d35.exe windows:4 windows x86 arch:x86
e82b8922de3925f9497845e437edb3d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord666
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord573
ord100
ord619
Sections
0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE