Static task
static1
Behavioral task
behavioral1
Sample
676db21dc264a9bed951d6c35fc0ca73e6ecf839028934ae2f015cb8c1efd487.exe
Resource
win7-20240903-en
General
-
Target
676db21dc264a9bed951d6c35fc0ca73e6ecf839028934ae2f015cb8c1efd487
-
Size
383KB
-
MD5
c808dec16e777fd79880e84ab4a0bea6
-
SHA1
f959e3b1afa512f2113d4ba4841a2b3382d16c67
-
SHA256
676db21dc264a9bed951d6c35fc0ca73e6ecf839028934ae2f015cb8c1efd487
-
SHA512
88ac93a49859e12e553d7cfc529f0da939f4d4d3f10a0280a1af2a7c1eb9e4cd02cce116eaf65e934f168b8dd365194849fcfef05ec9a3ad2663bb78a02b0f95
-
SSDEEP
6144:tOTnv5cW4WgmYn+XG1uALCnszsdMQTKgJDSMBunmZs5kz+:tcv5c9TndugCsQOEKODsL5kq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 676db21dc264a9bed951d6c35fc0ca73e6ecf839028934ae2f015cb8c1efd487
Files
-
676db21dc264a9bed951d6c35fc0ca73e6ecf839028934ae2f015cb8c1efd487.exe windows:4 windows x86 arch:x86
9724aabb7d55087800a208a7ac3716ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord666
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord100
ord619
ord581
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 32.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE