Static task
static1
Behavioral task
behavioral1
Sample
245b215fa1ce33c080e20666b36f456482cc9626171680f30237ef3632dd5be7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
245b215fa1ce33c080e20666b36f456482cc9626171680f30237ef3632dd5be7.exe
Resource
win10v2004-20240412-en
General
-
Target
245b215fa1ce33c080e20666b36f456482cc9626171680f30237ef3632dd5be7
-
Size
14KB
-
MD5
80fe195c9ce789ea2eee8cc4037d4e54
-
SHA1
eec32b5f69023b4556b2667eb64fc739bfda16b7
-
SHA256
245b215fa1ce33c080e20666b36f456482cc9626171680f30237ef3632dd5be7
-
SHA512
93fe7c33dad181886558de23df1e440702f10299aae0016d9c0ee650e546afcdf855a01e673bc8b7d7b29ae6df7c997c44b6f180f855c76467207e4862fccbde
-
SSDEEP
384:YwKEDKj956GHSPucvUK7GCcPNLDE045HA:kqaSPnvHC/xA+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 245b215fa1ce33c080e20666b36f456482cc9626171680f30237ef3632dd5be7
Files
-
245b215fa1ce33c080e20666b36f456482cc9626171680f30237ef3632dd5be7.exe windows:4 windows x86 arch:x86
9848b6a92f9dd26ee2792123fe165e2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
ord61766
ord60011
ord56545
ord48515
ord35304
ord29946
��k�i��ܽȃ�Ƚ�����t��L7
ord65535
ord65535
VBVM60.DLL
�rHJ�r�I�r�r�r;ġrr���r/p�r�b�r}A�r�}�rġr�V�rlW�r���r� �r ár]��r:�r��r���r�G�r�}�r��r��r��rV�ru�rH�r}i�r+��rg��r=�ruB�r�:�r7��rV�r:�r:�rJl�r�ڡrl�rn�r��r���r�5�r/N�r�ơr�m�rף�rpu�rѷ�r�m�r���r0l�r r���rD��r�ơrݢr�k�r�k�r���r0l�r r���rD��r�ơrݢr�k�r�� fqbf@�f�`f-�fm�fĊf�� f��f�`f
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ