Static task
static1
Behavioral task
behavioral1
Sample
8b88ae1bb44ee92f8e44fd2ab73f153d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b88ae1bb44ee92f8e44fd2ab73f153d.exe
Resource
win10v2004-20231215-en
General
-
Target
8b88ae1bb44ee92f8e44fd2ab73f153d
-
Size
64KB
-
MD5
8b88ae1bb44ee92f8e44fd2ab73f153d
-
SHA1
1f4a1aa161ec4fda072846ba1908a4c27d6c07cf
-
SHA256
f7cf173a1b4dbf2319b462641522364369573084274c633684b290d87d604bdb
-
SHA512
22e39f85759aa07ef87d58b58734d787ea21d856e995ebbbebc36a79182787a26aa7bfb5fc88980cf67e200c9f88a6e59f25e9f8547e3c1fd80a7a0f318eab70
-
SSDEEP
768:IJSwpbhhMwNmF1PQVZsDA1fFYM9M2AT9GbUhuJ:IJSA0wu18fL22ATdhuJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b88ae1bb44ee92f8e44fd2ab73f153d
Files
-
8b88ae1bb44ee92f8e44fd2ab73f153d.exe windows:4 windows x86 arch:x86
80247d3ece7aed9f22d6549fd19985f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord626
ord595
ord598
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord535
ord537
ord645
ord570
ord571
ord576
ord100
ord617
ord619
ord581
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE