Static task
static1
Behavioral task
behavioral1
Sample
75bd7b93e4a2a2c5cbcb2c1a9b6fd91a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
75bd7b93e4a2a2c5cbcb2c1a9b6fd91a.exe
Resource
win10v2004-20231215-en
General
-
Target
75bd7b93e4a2a2c5cbcb2c1a9b6fd91a
-
Size
174KB
-
MD5
75bd7b93e4a2a2c5cbcb2c1a9b6fd91a
-
SHA1
86a76873319eee53229a53a40246747573b59ee7
-
SHA256
29ea12545921448ffffaf2e2d38d22287e48773fcb5e9d5708d348a2af4296ed
-
SHA512
834adde0fd925a7644184e3324bce0cd2e153cb3ad2f8101d794857121bd71ee5b82be07c6f5781f45f122d7101c627b2e579ce1d039ef4755bcbb537a61b19e
-
SSDEEP
3072:8d+Vz8NPIGuuPug74pLBD47NFPfK6xjckf6eBHTBfb82HJ:8kF83J74px47zj6AHTBj82p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75bd7b93e4a2a2c5cbcb2c1a9b6fd91a
Files
-
75bd7b93e4a2a2c5cbcb2c1a9b6fd91a.exe windows:4 windows x86 arch:x86
eb6f38be18b4aa522d212d68e35dbad6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ