Static task
static1
Behavioral task
behavioral1
Sample
7fbbb9a00682afe7378ae6aec5450948.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7fbbb9a00682afe7378ae6aec5450948.exe
Resource
win10v2004-20231215-en
General
-
Target
7fbbb9a00682afe7378ae6aec5450948
-
Size
977KB
-
MD5
7fbbb9a00682afe7378ae6aec5450948
-
SHA1
5afee67b3347a7021075b8bbbf883a5dbe3cafcb
-
SHA256
5ba6dc8adc65fce3acc639ddcc87b205a4d5a96e7038ee59ddfc2b00e163e0f9
-
SHA512
63e3a48d902957d8623aa09daeed42074231a52b0e075b96e3ff65a6bfe92a39495b15d57cd797ad1c02ef8a4a3e2796f31c181363b77b69db4a49c3a565abfb
-
SSDEEP
24576:pH6CjXki0L8LuibBSboTbrNWY7WFzvAPpKpPIuUVNmS+bYT2r:13jCKuSwbo5WaWFzOKwDVr7T2r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7fbbb9a00682afe7378ae6aec5450948
Files
-
7fbbb9a00682afe7378ae6aec5450948.exe windows:4 windows x86 arch:x86
922424ff4e6d82e1aa12068913ce37ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord608
ord717
ProcCallEngine
ord644
ord100
BASIC_CLASS_AddRef
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ