Static task
static1
Behavioral task
behavioral1
Sample
994ab707857bf170fe15cf6f2b0e1a47.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
994ab707857bf170fe15cf6f2b0e1a47.exe
Resource
win10v2004-20231215-en
General
-
Target
994ab707857bf170fe15cf6f2b0e1a47
-
Size
12KB
-
MD5
994ab707857bf170fe15cf6f2b0e1a47
-
SHA1
bb957f880b8c8fccacb2e3cc6a37f0b940e28d5c
-
SHA256
e12af33ea09afb41ab966efaccf4a3924d4ac215206931141371611dbcc2e530
-
SHA512
c0e0f51a190091f7487de04eee07435c679ec2765720940c518dc7e88877229070f4b76f21075bc7797fb400e304edd3fe502bde85078e2bce3eac0f53c1e5e5
-
SSDEEP
48:ygHPiwsF5W8M8BZ1uwtU0WlsJucLWoThxE76XPcMw3wlEqK2:nqX5W8nIoWiziogGXPLtEZ2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 994ab707857bf170fe15cf6f2b0e1a47
Files
-
994ab707857bf170fe15cf6f2b0e1a47.exe windows:4 windows x86 arch:x86
5148d58910580d67693a38687b5dfe11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord632
DllFunctionCall
__vbaExceptHandler
ProcCallEngine
ord644
ord100
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ