Static task
static1
Behavioral task
behavioral1
Sample
110a68015362fb44582ed1d9d5ac3f5eec356ba25e0d09ec2cd1ea82ac48f2c5.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
110a68015362fb44582ed1d9d5ac3f5eec356ba25e0d09ec2cd1ea82ac48f2c5.exe
Resource
win10v2004-20240611-en
General
-
Target
110a68015362fb44582ed1d9d5ac3f5eec356ba25e0d09ec2cd1ea82ac48f2c5.exe
-
Size
146KB
-
MD5
b1ede3ca660dd4ced9836c2b702f4100
-
SHA1
387cf6529d4ee2c53d7deed54dc8e66fa35a9bdb
-
SHA256
110a68015362fb44582ed1d9d5ac3f5eec356ba25e0d09ec2cd1ea82ac48f2c5
-
SHA512
1536942876954cf592f5ba0f7f5fc27d8a17692cf375cf91cc4b1fa8c3692061310ba9369af905122a97fe4d961e343aedf519ac728c6431a6e32f8c430e37ad
-
SSDEEP
1536:+oZEMCWDIWdE5YnHwT9Mo6ce4EIKNouXJhLKFylIp8cA8LDXkxqw8+wvDL/H:pZZdEeQZLJREI/kKF9lA1UfTDL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 110a68015362fb44582ed1d9d5ac3f5eec356ba25e0d09ec2cd1ea82ac48f2c5.exe
Files
-
110a68015362fb44582ed1d9d5ac3f5eec356ba25e0d09ec2cd1ea82ac48f2c5.exe.exe windows:4 windows x86 arch:x86
a18759ebce08e63932f18794df90c9e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord441
ord669
EVENT_SINK_AddRef
ord528
ord678
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
Sections
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ