Static task
static1
Behavioral task
behavioral1
Sample
c0695ddc451732465001d7ffca59ab20.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0695ddc451732465001d7ffca59ab20.exe
Resource
win10v2004-20240226-en
General
-
Target
c0695ddc451732465001d7ffca59ab20
-
Size
24KB
-
MD5
c0695ddc451732465001d7ffca59ab20
-
SHA1
b793690eaaacfef5e8138021795a6dde0d198d0e
-
SHA256
f005b0522042d9d7bace17d850739bd5c59c6b66a620649b8bf927a324740fa0
-
SHA512
04903f3cd9b1f45c62917e1f720fb5ade69e25a40d25c06050395ce6b9d6a889b4d3f662f2284b05ae07aba790b33e4c31df090fc9e6be7b1db3f5de03326e61
-
SSDEEP
192:X2bPIABoEfFVub2YRLJ5nNzhZ0SvTCqLRlvNu3rUSCwXK+m74HslOYcMK2:G/5GiY5ttZZveorEw2K+84HsHK2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0695ddc451732465001d7ffca59ab20
Files
-
c0695ddc451732465001d7ffca59ab20.exe windows:4 windows x86 arch:x86
bcd77d33a4e1cee55f2c124644881305
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord593
ord598
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616
Sections
. Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE