Static task
static1
Behavioral task
behavioral1
Sample
d8c7da1439ea7f376c1d38bdb6dccb08322979613a37d793188f53f70be9f843.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d8c7da1439ea7f376c1d38bdb6dccb08322979613a37d793188f53f70be9f843.exe
Resource
win10v2004-20241007-en
General
-
Target
d8c7da1439ea7f376c1d38bdb6dccb08322979613a37d793188f53f70be9f843
-
Size
40KB
-
MD5
011c24751caec51684e7589ab300b941
-
SHA1
ef70ff1f689adbf433ed6c254c3f6e4c786d8aed
-
SHA256
d8c7da1439ea7f376c1d38bdb6dccb08322979613a37d793188f53f70be9f843
-
SHA512
90a10db639250f5f78428c63320ddfabcb1ad04ae1c6dc7b916ddde67cf6ea4d566d6a98e7f1a7b137bd07763304cf756d0ad15f43ac0b3db7a8218e6253f87b
-
SSDEEP
384:/J7Fg40be5fdJGSJ6aUAMlltLB6GFMan9FtFtFtDVyJZHqwIVICSJicdPhhZPA:/Jp0Qii6aU3JfR9HHHCqlcJXdZhZP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d8c7da1439ea7f376c1d38bdb6dccb08322979613a37d793188f53f70be9f843
Files
-
d8c7da1439ea7f376c1d38bdb6dccb08322979613a37d793188f53f70be9f843.exe windows:4 windows x86 arch:x86
245032a982d56b01ab1b9ee9988f5fdc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord662
ord593
ord594
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord645
ord100
ord546
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ