Static task
static1
Behavioral task
behavioral1
Sample
cb932769f054a4487090163a0c37ed7c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb932769f054a4487090163a0c37ed7c.exe
Resource
win10v2004-20240226-en
General
-
Target
cb932769f054a4487090163a0c37ed7c
-
Size
28KB
-
MD5
cb932769f054a4487090163a0c37ed7c
-
SHA1
13309b668884bcc2ad164375cc1d94bda4aa9888
-
SHA256
905482a2a75ed403773bcb462a43f74436b4ad10e467f9d25df44fd780455600
-
SHA512
da06e2c7953ad4c4f5617ad581179b8771515b2d74c6be970b88f89715280e983437f58aa20f9a7ea08189e2c1f3246daf025e08f682810f6991b0353337da3a
-
SSDEEP
384:uvvlnFRQwKMjAEDKHNnYJAvYleofJYzFNVnQTf1moaT:qNFZj6NSaYleWJAVnEU1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb932769f054a4487090163a0c37ed7c
Files
-
cb932769f054a4487090163a0c37ed7c.exe windows:4 windows x86 arch:x86
dc17839040d50182e7b0acc4e49c5324
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord681
ord685
ord100
ord618
ord581
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ