Static task
static1
Behavioral task
behavioral1
Sample
9b82f6210deea438631dfabe6cd25a8a.exe
Resource
win7-20231215-en
General
-
Target
9b82f6210deea438631dfabe6cd25a8a
-
Size
520KB
-
MD5
9b82f6210deea438631dfabe6cd25a8a
-
SHA1
ceb5d97d546edbec828862b5f5f6a5720f376298
-
SHA256
468ebbc9436b2e59b574445a4f85b6f1d5763ac744ec0b1ab5f4b163b6b5dc65
-
SHA512
1784395a75de66b547f04da134a2a0c7866652a91f4421edbdd4513d5785d433cb07a5ec1292d448032219b050fa81fe3fd645bde0e5803e505c9f27e1f3bbc2
-
SSDEEP
12288:FfQO2a+AXfqvTD0KklhL0dyDKgxlqz1n5DHaYrf:q8+girQKklx0YDKgxKp5DHRz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9b82f6210deea438631dfabe6cd25a8a
Files
-
9b82f6210deea438631dfabe6cd25a8a.exe windows:4 windows x86 arch:x86
1b12c955348b70d11b819732342b2af8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord585
ord588
ord696
ord697
ord698
MethCallEngine
ord517
ord519
ord183
ord553
ord660
ord667
ord706
ord631
ord525
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord675
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord530
ord609
ord717
ord533
ord186
VarPtr
ord539
ord570
ord648
ord575
ord100
ord610
ord613
ord617
ord618
ord619
ord542
ord545
ord548
ord549
Sections
.text Size: 152KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 364KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ