Static task
static1
Behavioral task
behavioral1
Sample
e4a21abe4200becc477eae278891ec002737a2321dd589c11efec019bb34fadb.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e4a21abe4200becc477eae278891ec002737a2321dd589c11efec019bb34fadb.exe
Resource
win10v2004-20240426-en
General
-
Target
e4a21abe4200becc477eae278891ec002737a2321dd589c11efec019bb34fadb
-
Size
172KB
-
MD5
40c6c0d75815869cf2a5d79d5623800f
-
SHA1
e632d1eaf55c4a8c6085bd53f1b6011d20fefbe0
-
SHA256
e4a21abe4200becc477eae278891ec002737a2321dd589c11efec019bb34fadb
-
SHA512
a6d92d261a7f011283985d818e9847d44444d4c67ec5a6c2bf45013cd90f8c5f57e58256346a20e3e6e4f3c395c25cc5344717bf2001c3966fe711f4eaa22346
-
SSDEEP
768:zeNOwWn/HB8HMND8DBbYPxMDeNOwWn/HB8iaCz:zeNCn/HB8HMNYDBbZDeNCn/HB8irz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4a21abe4200becc477eae278891ec002737a2321dd589c11efec019bb34fadb
Files
-
e4a21abe4200becc477eae278891ec002737a2321dd589c11efec019bb34fadb.exe windows:4 windows x86 arch:x86
1c1a4b4b4c223591342ce744d51f8329
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord587
MethCallEngine
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord537
ord648
ord681
ord100
ord579
ord616
ord617
ord618
ord580
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE