Static task
static1
Behavioral task
behavioral1
Sample
c2f480e1ffede5b45de45d3b22152109.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2f480e1ffede5b45de45d3b22152109.exe
Resource
win10v2004-20240226-en
General
-
Target
c2f480e1ffede5b45de45d3b22152109
-
Size
20KB
-
MD5
c2f480e1ffede5b45de45d3b22152109
-
SHA1
d15103e97ba2da3bff35cedf8a23189642262cb8
-
SHA256
335bbcc265e914903aa9a8fd07aa438dfd88b41d4dcb1fac391eb5cb4680818a
-
SHA512
8b66c9691e3336218ad9671d4da8f260a67de89bc87d126b331ff8e26a6c24feb646ffab710a73bc9548c8dde0103368bb127e1479520c673fa5d657b546a03d
-
SSDEEP
192:VyEXEPEqEFEQELEmEREMEHECEdEoE4CaB6xrErDmwGMq8ecacGs68Of/5Pq:mE5GMq8ecacGs68Ofpq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2f480e1ffede5b45de45d3b22152109
Files
-
c2f480e1ffede5b45de45d3b22152109.exe windows:4 windows x86 arch:x86
cd15a8e4499a05138c64874c08856d56
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord595
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ