Static task
static1
General
-
Target
bb7a840757781b91379c9e75de6d17c0N.exe
-
Size
64KB
-
MD5
bb7a840757781b91379c9e75de6d17c0
-
SHA1
578cff89e010f3124d78f9845b08d43d2799afcb
-
SHA256
a6d066759b2b49837fe2d784411f202ebd3873687a3fbfcd0ceb3104a96f7021
-
SHA512
42b6c14a029124726c98bede5e417d83aa8a0d0d202b5ba0db1d54360e92b00f66d65c77659238e9c4180c5c407ab55bd8608f320d0fcb06dc814772057ba5d4
-
SSDEEP
768:qpQNwC3BET4QEfu0Ei8XxNDIN/3BEJwsrV:KeTqavEjDWpuhV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb7a840757781b91379c9e75de6d17c0N.exe
Files
-
bb7a840757781b91379c9e75de6d17c0N.exe.exe windows:4 windows x86 arch:x86
1639b1e17656fed4f63bac94cbb79cec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580
Sections
.text Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ