Static task
static1
Behavioral task
behavioral1
Sample
68cafa4e3d69f22887c3a922266147ba0454eeb4cb4fa91b5fff3f4e05930474.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68cafa4e3d69f22887c3a922266147ba0454eeb4cb4fa91b5fff3f4e05930474.exe
Resource
win10v2004-20240802-en
General
-
Target
3fcc528597e9f233e33284b84f3a5f68c079ac8552c42d39e7985d57ab71b0fd
-
Size
51KB
-
MD5
a1c035d61693596c9f18dda46991075b
-
SHA1
125c22ba41ae2f891de8560c1a459be07ab9654c
-
SHA256
3fcc528597e9f233e33284b84f3a5f68c079ac8552c42d39e7985d57ab71b0fd
-
SHA512
6582755a8e7d1ce914251e55a7c02176d51f47d990d2c852f08f99df2e07786531eca331ede6e63eadcd8eefe4b46c580dd35c5204676dc6d676f892e1940388
-
SSDEEP
768:m4wjlwTy5/2QQ6JWFXiiAIma3kPN6ZOmBt2GydOS57oubSVedimMG/iuSXgMYH:kvQP/iiANMcO8t15bQaDxF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/68cafa4e3d69f22887c3a922266147ba0454eeb4cb4fa91b5fff3f4e05930474
Files
-
3fcc528597e9f233e33284b84f3a5f68c079ac8552c42d39e7985d57ab71b0fd.zip
Password: infected
-
68cafa4e3d69f22887c3a922266147ba0454eeb4cb4fa91b5fff3f4e05930474.exe windows:4 windows x86 arch:x86
3a6c1ee8070e2aee2911bcbfa26fab8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord187
MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord632
EVENT_SINK_AddRef
ord527
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord681
ord100
ord431
ord616
ord617
ord619
Sections
.text Size: 228KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE