Static task
static1
Behavioral task
behavioral1
Sample
c3f044cb88fda85f7d5c2e924e7d87bc.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c3f044cb88fda85f7d5c2e924e7d87bc.exe
Resource
win10v2004-20231215-en
General
-
Target
c3f044cb88fda85f7d5c2e924e7d87bc
-
Size
80KB
-
MD5
c3f044cb88fda85f7d5c2e924e7d87bc
-
SHA1
cced04a99a658eae21bd030189f08d93f113b774
-
SHA256
44f4a943c22c82b2ea59dc1e111fc3b8a592c767d4023717f331764342f3a417
-
SHA512
fce1fbaa6fd1c316d4bcbb257b565b8c64ec7c9aea9abb428734989c24eef82ff722b492384dbb8988279830264c9f0b43ec89cbadee1e6151b49571e614af3f
-
SSDEEP
768:wZicadE4dn/dEsHbnutjD+H/1EEpnutjtsH2dBPdMdEtf:s7GqlO/CEU8q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3f044cb88fda85f7d5c2e924e7d87bc
Files
-
c3f044cb88fda85f7d5c2e924e7d87bc.exe windows:4 windows x86 arch:x86
1512f846b53fe667813ea8d4ff320b93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord593
ord594
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord610
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ