Static task
static1
Behavioral task
behavioral1
Sample
75039f56f68b74133d9d9155e93fc5e1.exe
Resource
win7-20231129-en
General
-
Target
75039f56f68b74133d9d9155e93fc5e1
-
Size
28KB
-
MD5
75039f56f68b74133d9d9155e93fc5e1
-
SHA1
d7e833e2163c9851fb6a366db4fb5ae69b282b1d
-
SHA256
4529535c4f4f012b07e3080c1049fd4ba25ac424ac0a0d51f73cda545a4e594f
-
SHA512
f1f090aab286b576311d323510588ca3c8f6aa2f0829bc09cbd12cc26a3b6f1f4e92c63971db7c1e27b789ae607f8e2ae987a16baf52b4a694dc0d1f4c910a52
-
SSDEEP
384:nN6dHcM3y/FgMY/lnflPirosIcKjKKqCCSJ4lD/hiIDgqgS:AdHC/FgMY/lfI2uSTKgqg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75039f56f68b74133d9d9155e93fc5e1
Files
-
75039f56f68b74133d9d9155e93fc5e1.exe windows:4 windows x86 arch:x86
3931d856198fc0c285ee48cbcf10dfca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
MethCallEngine
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ