Static task
static1
Behavioral task
behavioral1
Sample
c4eb16c3e56fb9fd532abe4e64300d92.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4eb16c3e56fb9fd532abe4e64300d92.exe
Resource
win10v2004-20240226-en
General
-
Target
c4eb16c3e56fb9fd532abe4e64300d92
-
Size
136KB
-
MD5
c4eb16c3e56fb9fd532abe4e64300d92
-
SHA1
bd8554b9c2487f3d40bba1f58a125a1badd9d969
-
SHA256
db8d88269cccb565837bae5fb3b94582b053bfa0ffb90249c46d2e670855c190
-
SHA512
cf6e31dc0696b34d1689902c6a03a1ea45644cc29b31f57dd24abe0f58ea08f30e315b0f7b7b206bbf9e0d015f850d4e09b6db5a68d2e988818bbbc2479346ee
-
SSDEEP
1536:e+2kG7hnG5N4egYthjEjxbIrZ5ZvBgRA1rZM4YEBzmPZa:e+fx5+9Yfo0P5BgRAFZMapUZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4eb16c3e56fb9fd532abe4e64300d92
Files
-
c4eb16c3e56fb9fd532abe4e64300d92.exe windows:4 windows x86 arch:x86
f9eb281b97846801ab719243b106af57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ord100
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ