Static task
static1
Behavioral task
behavioral1
Sample
79f8541c2e5ad6a0d01fdc351f42eb3a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
79f8541c2e5ad6a0d01fdc351f42eb3a.exe
Resource
win10v2004-20231222-en
General
-
Target
79f8541c2e5ad6a0d01fdc351f42eb3a
-
Size
16KB
-
MD5
79f8541c2e5ad6a0d01fdc351f42eb3a
-
SHA1
83cd41665cad008decb05a806863dd07fc396011
-
SHA256
b1b528de6e4c400b8d875e119753d10c18c9a5f7dbd7eb32a496aabec28cf10a
-
SHA512
fb719cc751ba82a169698da48e65d978b9c7d231bdc9bab12c49d9912261d97232d8bc881d54de0c67e441b90bfad0eca786ea2a4c54f9fd90d923ae148bba81
-
SSDEEP
48:KQVTwF44Tc8ZaQ9LDVG356uVDxPaOesbAxDo85JvHX9WOfGvPJ6vrFwbEXlBc:XVT+zVaQBVGcuVxaOJgo8HvHXNi7Ej
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79f8541c2e5ad6a0d01fdc351f42eb3a
Files
-
79f8541c2e5ad6a0d01fdc351f42eb3a.exe windows:4 windows x86 arch:x86
4664128ac479b43704343fd9b5d4f9cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ord100
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ