Static task
static1
Behavioral task
behavioral1
Sample
7f14a77607a93b97c417d7c5024645de.exe
Resource
win7-20231215-en
General
-
Target
7f14a77607a93b97c417d7c5024645de
-
Size
184KB
-
MD5
7f14a77607a93b97c417d7c5024645de
-
SHA1
58c1413d06e0547c880433ecd16e80bc80f93252
-
SHA256
5e13a7a86c9e611b29048a094b3ba33b0f3396b4860928827ce8e167a34bd417
-
SHA512
5314aa85478ff6fca49e60f1d4a617b8644ea51e050b72d540597f6db0901769079e2b6da39e861ea3ee766e69aaf9e09a97668ae4ba43b4e2c5802f3288776c
-
SSDEEP
3072:0FNFaBr565krFkhuGsWiux4jP9EyGrc9I9WiTuNuOH1AVIHUSKfUhFw:0OmcjltMmI9Wi581FScFw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f14a77607a93b97c417d7c5024645de
Files
-
7f14a77607a93b97c417d7c5024645de.exe windows:4 windows x86 arch:x86
bcf658dea0f6f1c96ea144d1ed6a4ea2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord593
ord594
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord570
ord572
ord573
ord681
ord685
ord578
ord100
ord619
ord581
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE