Static task
static1
Behavioral task
behavioral1
Sample
70346fb532e0cc523cb8ef7ebb33e00a278d2915b919c2d0b54dd9a500d1a972N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
70346fb532e0cc523cb8ef7ebb33e00a278d2915b919c2d0b54dd9a500d1a972N.exe
Resource
win10v2004-20241007-en
General
-
Target
70346fb532e0cc523cb8ef7ebb33e00a278d2915b919c2d0b54dd9a500d1a972N
-
Size
36KB
-
MD5
4ea2851e0f0d4acf3e227482db4c60b0
-
SHA1
2ef803a8499a573791e8b35e53dba6f86061ac18
-
SHA256
70346fb532e0cc523cb8ef7ebb33e00a278d2915b919c2d0b54dd9a500d1a972
-
SHA512
704bca95b6056d282473baf3a033f6dbc7bdb0164a1efe8189067a9f4534943311fc7e705bc2ecf0a4b81e6fc494d4f339e57f8a9b49a974cd32db38affb1748
-
SSDEEP
384:BmTcGB2lp6bV8obxAMlltLB6GFMan9FtFtFtDVyJ6LIXeYZefjeze7TvAIXes/kf:ByY6/bx3JfR9HHHCOxLMETvAIXes4q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70346fb532e0cc523cb8ef7ebb33e00a278d2915b919c2d0b54dd9a500d1a972N
Files
-
70346fb532e0cc523cb8ef7ebb33e00a278d2915b919c2d0b54dd9a500d1a972N.exe windows:4 windows x86 arch:x86
245032a982d56b01ab1b9ee9988f5fdc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord662
ord593
ord594
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord645
ord100
ord546
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ