Static task
static1
Behavioral task
behavioral1
Sample
cd10c8d760988e3e110307788f0974e0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cd10c8d760988e3e110307788f0974e0N.exe
Resource
win10v2004-20240802-en
General
-
Target
cd10c8d760988e3e110307788f0974e0N.exe
-
Size
624KB
-
MD5
cd10c8d760988e3e110307788f0974e0
-
SHA1
5b154258460704474a8f1cf82b1c5c1403c11cb4
-
SHA256
035e40a53750865cd0dcb3d431ca48efe532082a4a80ed658e87a0343788fb61
-
SHA512
ebef5f6e0b18a9aec44973169ebf25fe66089e573c6f9af8be59af85c86fce5c6b8aa27795a821a209bb77275b98f71cbbb92e9fb93d0f58504c4ab02fb1cb6b
-
SSDEEP
12288:PzQOcFegUZYsJiJvjFoO7wiLOyEXfd8Vw8FIeVWhg:0OGvjFoOUHXl8u8Fj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd10c8d760988e3e110307788f0974e0N.exe
Files
-
cd10c8d760988e3e110307788f0974e0N.exe.exe windows:4 windows x86 arch:x86
5d7ece5d044d91326a0c21891d36614e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
__vbaVarSub
__vbaNextEachAry
Sections
.text Size: 384KB - Virtual size: 382KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ