Static task
static1
Behavioral task
behavioral1
Sample
dedeb0909243e93d4c9b05f13e612902.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
dedeb0909243e93d4c9b05f13e612902.exe
Resource
win10v2004-20240226-en
General
-
Target
dedeb0909243e93d4c9b05f13e612902
-
Size
31KB
-
MD5
dedeb0909243e93d4c9b05f13e612902
-
SHA1
a6cb337af53a4819fcb6cc54758e5b18a1c3a773
-
SHA256
cb7ac7b95f1dac1c7087c700306045627864d1f8051f228511dc6a639ad44b74
-
SHA512
291628a53cd450c6caab63824af5dae7bcfa13d4fbb37ccb7c2572015ac052bc27cd182070c403eef542a8e8342d9b1cbbf1c89174263054e6a174342757c8a7
-
SSDEEP
384:lJ8rcRInBFQGasqmlezG64NCgHcmtlXQiYs1h6wHJmdVsw/gcIV:r8r3BFQzTm2G0gjPAoQVxIcIV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dedeb0909243e93d4c9b05f13e612902
Files
-
dedeb0909243e93d4c9b05f13e612902.exe windows:4 windows x86 arch:x86
cd81becf486c9d62d6f95dee4dc59988
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
ord526
ord529
DllFunctionCall
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord648
ord578
ord100
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ