Static task
static1
Behavioral task
behavioral1
Sample
d312ffa4571cec3b38f91b1f65e3bd2369afc863ce2bf1617fb48eb394815815.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
d312ffa4571cec3b38f91b1f65e3bd2369afc863ce2bf1617fb48eb394815815.exe
Resource
win10v2004-20240802-en
General
-
Target
d312ffa4571cec3b38f91b1f65e3bd2369afc863ce2bf1617fb48eb394815815
-
Size
76KB
-
MD5
9270dafc421fad2c761865eb44129e9c
-
SHA1
a0d2b6c3fab5f5c89565cdbc1c8236885cf38df4
-
SHA256
d312ffa4571cec3b38f91b1f65e3bd2369afc863ce2bf1617fb48eb394815815
-
SHA512
619c143fdc814d4508d7e8ddea15cffc583d16aef0cb6805da9953b6953d4ea2cb93a058024d4eab0cee9be438cd9eb9875db18682e3142e481b5438e465008a
-
SSDEEP
768:wtc4VvMyhzIcLWr31w/aAFqxGf6G+2mvtgf4t3lEw/aAFqxbLWr3fthzm4VvMW:wK4H5uw/a+qUfV+2talEw/a+qpA84
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d312ffa4571cec3b38f91b1f65e3bd2369afc863ce2bf1617fb48eb394815815
Files
-
d312ffa4571cec3b38f91b1f65e3bd2369afc863ce2bf1617fb48eb394815815.exe windows:4 windows x86 arch:x86
54da793532bd71ab42d22ba992de554f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord518
Zombie_GetTypeInfo
EVENT_SINK2_Release
ord595
ord598
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord531
ord319
ord644
ord645
ord571
EVENT_SINK2_AddRef
ord100
ord320
ord321
ord617
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ