Static task
static1
Behavioral task
behavioral1
Sample
c7ccff23b2f08cc99141e0d95c1cbcfe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c7ccff23b2f08cc99141e0d95c1cbcfe.exe
Resource
win10v2004-20240226-en
General
-
Target
c7ccff23b2f08cc99141e0d95c1cbcfe
-
Size
33KB
-
MD5
c7ccff23b2f08cc99141e0d95c1cbcfe
-
SHA1
fd6c1e63f08b57fd7e74ea2aec55cf5c1b97dbea
-
SHA256
53203b433408771b6aa8a651f0b5d88ab8dbb11b347a862916aef858107f6ed0
-
SHA512
81d8ccd4553b56cfca21d06e800116cc686146cd53ed3e303437b9d6199a81d9b63a0d35d3356c0cd7b960e122aa18dc6668d63ebd6c20fb1c5b2cee1c52f7f1
-
SSDEEP
384:kX7BonAzoAviMkur4AZuK0UQXo5qbBNGrtUMd5UA2/aymsbp9Hzkshwsie9uwQCg:kX7mnAz5HrLuKS40qSYRbO3kfNHl0dy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7ccff23b2f08cc99141e0d95c1cbcfe
Files
-
c7ccff23b2f08cc99141e0d95c1cbcfe.exe windows:4 windows x86 arch:x86
132aa8379e35430fa934f7946b05dc9c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
ord516
ord593
ord595
ord632
ord526
DllFunctionCall
ord600
__vbaExceptHandler
ord608
ProcCallEngine
ord570
ord576
ord100
ord616
ord617
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ