Static task
static1
Behavioral task
behavioral1
Sample
98b5e6d751399b2123db3d0d2492036c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
98b5e6d751399b2123db3d0d2492036c.exe
Resource
win10v2004-20231222-en
General
-
Target
98b5e6d751399b2123db3d0d2492036c
-
Size
200KB
-
MD5
98b5e6d751399b2123db3d0d2492036c
-
SHA1
c44d0a32274ca98805c14173ab329b464d8d96ac
-
SHA256
21384113a8555d779ca42fa39d1381422044b86d6150d8d1a354714f4e84b0fd
-
SHA512
e3edd5cfe5f4efd5743f0bf478af3c4af688e015bd73c9bc5cb677c6e034f194dec995686d3b776a8f813df49ed6dafcd7732a2aad97f01ef6e18a3bf6581c1c
-
SSDEEP
3072:ooS4bbnfteKSxF04yl0mwOmOHkFW1XhnUKK/FvNjca:/SK4LAEFuXDK1N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98b5e6d751399b2123db3d0d2492036c
Files
-
98b5e6d751399b2123db3d0d2492036c.exe windows:4 windows x86 arch:x86
82c3c62a9925fc24dd98082c271d435c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
MethCallEngine
ord516
ord593
ord594
ord595
ord598
ord520
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord530
ord608
ord531
ord716
ord609
ord532
ord717
ProcCallEngine
ord535
ord645
ord646
ord648
ord570
ord571
ord576
ord685
ord100
ord579
ord689
ord611
ord616
ord617
ord580
ord581
Sections
.text Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE