Static task
static1
Behavioral task
behavioral1
Sample
13160d53c83b5cf217ecac23ffdf3838a3368dfbe87cf07bba471abaf2e7886a.exe
Resource
win7-20240508-en
General
-
Target
13160d53c83b5cf217ecac23ffdf3838a3368dfbe87cf07bba471abaf2e7886a.exe
-
Size
32KB
-
MD5
925196d0fa4f22aaa851511000759036
-
SHA1
d86f764e8e02832029a48db2d180a71777f6d130
-
SHA256
13160d53c83b5cf217ecac23ffdf3838a3368dfbe87cf07bba471abaf2e7886a
-
SHA512
0f28f284af41442b2bf6796dcec2a10a623c8619164e33d32aaf834c15c081695e8d0821e091bc8f994268f7c4c4138140890958c64151cb24358baaaa2ffc9e
-
SSDEEP
384:Pe/aOaOhwcyBorvh5SoPux8H4nrA/ae/F:PEBa0Blr55HErqx9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13160d53c83b5cf217ecac23ffdf3838a3368dfbe87cf07bba471abaf2e7886a.exe
Files
-
13160d53c83b5cf217ecac23ffdf3838a3368dfbe87cf07bba471abaf2e7886a.exe.exe windows:4 windows x86 arch:x86
87e75b8ffd4de41739f8a1b4c2d9f619
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord621
ord626
ord666
ord598
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord319
ProcCallEngine
ord535
ord570
ord648
ord685
ord100
ord579
ord320
ord321
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ