Static task
static1
Behavioral task
behavioral1
Sample
43ab8a554fbb1824291dbe71593513e0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43ab8a554fbb1824291dbe71593513e0N.exe
Resource
win10v2004-20240709-en
General
-
Target
43ab8a554fbb1824291dbe71593513e0N.exe
-
Size
1.7MB
-
MD5
43ab8a554fbb1824291dbe71593513e0
-
SHA1
f4ae961f1a32d82dacefbb5843c6406bb97e3e17
-
SHA256
c1461bda0f63a4f4279bf445a74898f35c59e182e4f5b5fdaf4c26a3a8cfaacb
-
SHA512
d0660c11ee3e08f0a15243c80a9f0f1bba5d1d7ce7797475b6495009582f0263675e9c2d78c101c99a4ac2b45d860228026e937dfcf4fbb749a91fce8694eef1
-
SSDEEP
24576:+bDhlbwTbDhHTzh7bDhqbDhgEbDhHbDh0PvMAGvkhic:3H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43ab8a554fbb1824291dbe71593513e0N.exe
Files
-
43ab8a554fbb1824291dbe71593513e0N.exe.exe windows:4 windows x86 arch:x86
e2b090b00614273772dbdbaa518f456b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord589
MethCallEngine
ord516
ord518
ord626
ord552
ord553
ord660
ord661
ord662
ord557
ord558
ord591
ord592
ord300
ord301
ord595
ord302
ord596
ord303
ord597
ord304
ord598
ord599
ord306
ord520
ord307
ord308
ord522
ord309
ord632
EVENT_SINK_AddRef
ord528
ord529
ord560
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord712
ord608
ord716
ord534
ProcCallEngine
ord536
ord644
ord645
ord648
ord681
ord685
ord100
ord689
ord610
ord612
ord613
ord616
ord617
ord619
ord542
ord543
ord650
ord544
ord651
ord545
ord546
ord547
ord581
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ