Static task
static1
Behavioral task
behavioral1
Sample
0f7849c96b3ab372b5072b4f7ae0240b42a9aa04030eab615f4b5cbe03871acf.exe
Resource
win7-20240704-en
General
-
Target
0f7849c96b3ab372b5072b4f7ae0240b42a9aa04030eab615f4b5cbe03871acf
-
Size
79KB
-
MD5
1a04ea14943eeb611e8a037a51939957
-
SHA1
ded37911699202350e4fe970571af271977a6f9e
-
SHA256
0f7849c96b3ab372b5072b4f7ae0240b42a9aa04030eab615f4b5cbe03871acf
-
SHA512
73b7c7362bdc034389a080b4cdf8e06b15826a1ad4359c4b235ef0806ebf26f2c04587be75f75fa8c4de368db954d865047321f99c02c394a76df0e58190b27d
-
SSDEEP
768:FMpQNwC3BEddsEqOt/hyJuQNwC3BEp+2mDblVAQ4ogDjdNg:qeTce/U/hjeTqsDblVKny
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f7849c96b3ab372b5072b4f7ae0240b42a9aa04030eab615f4b5cbe03871acf
Files
-
0f7849c96b3ab372b5072b4f7ae0240b42a9aa04030eab615f4b5cbe03871acf.exe windows:4 windows x86 arch:x86
1639b1e17656fed4f63bac94cbb79cec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580
Sections
.text Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE