Static task
static1
Behavioral task
behavioral1
Sample
7f037d97419fd80778ca8b74debe9948.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7f037d97419fd80778ca8b74debe9948.exe
Resource
win10v2004-20231222-en
General
-
Target
7f037d97419fd80778ca8b74debe9948
-
Size
56KB
-
MD5
7f037d97419fd80778ca8b74debe9948
-
SHA1
61bc51afe02ac7297736f18284a43b142b33cb7b
-
SHA256
e6d6b11b31dadf936915ac6e0eacb67a87b34bba11074d64501d3d0b993572ce
-
SHA512
1285651a0660b494ea80a447cdf4ef675f9cc5797b3171647fd2a1a5704e2ca608ed147446f62e99a6208cd847d253aaa422b1fa4bc447ca6232ce54756b50bf
-
SSDEEP
768:dA6B6xyqopMPAO6ChO2UHPQbzdFOmw94fr+i18Z8jDwV:dA6BEyqk8+CZOmw94fKwEAm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f037d97419fd80778ca8b74debe9948
Files
-
7f037d97419fd80778ca8b74debe9948.exe windows:4 windows x86 arch:x86
a4ad7d5b005c95b6d3f5dd8874a9648e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord518
ord598
ord709
ord631
ord632
DllFunctionCall
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord576
ord100
ord616
ord580
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE