Static task
static1
Behavioral task
behavioral1
Sample
75abeeb6de18530f65d26e8115251b8c.exe
Resource
win7-20231215-en
General
-
Target
75abeeb6de18530f65d26e8115251b8c
-
Size
256KB
-
MD5
75abeeb6de18530f65d26e8115251b8c
-
SHA1
80452c4a175ad5bdc104d8df668086bb75e10d07
-
SHA256
858f6a1fa1b8cabdabe09675348a7775512af11ca3fdd8817e2270e06043a33d
-
SHA512
8fff63fa4c94711a6c91ed78da5a0f909df0bf53b3e27c8ad119cf8ba4f8368f05772844ef6a6d8598448b6ad601a4287aacd4a2eef5c323440aa8e0219664af
-
SSDEEP
6144:4TLusHMf9+o6kpHWWDDqAHKDgDlCez1/Af++sPyj:1Jf5h2W/qAHMyVAV0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75abeeb6de18530f65d26e8115251b8c
Files
-
75abeeb6de18530f65d26e8115251b8c.exe windows:4 windows x86 arch:x86
91ef0e693542e472a8200b78ffa26c14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord586
ord693
ord695
ord588
MethCallEngine
ord661
ord702
ord631
ord525
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord564
ord675
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord609
ord647
ord100
ord687
ord610
ord613
ord614
ord540
ord546
ord547
Sections
.text Size: 244KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ