Static task
static1
Behavioral task
behavioral1
Sample
8aa2527d121d41285fc9d1419b201edc7092b2dd65bee2deeaa2aa966e592347N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8aa2527d121d41285fc9d1419b201edc7092b2dd65bee2deeaa2aa966e592347N.exe
Resource
win10v2004-20241007-en
General
-
Target
8aa2527d121d41285fc9d1419b201edc7092b2dd65bee2deeaa2aa966e592347N
-
Size
52KB
-
MD5
88720853cc03cd022dba7dce7683bae0
-
SHA1
74c3f09f250701a0af27e22ae14eb135a31b62d8
-
SHA256
8aa2527d121d41285fc9d1419b201edc7092b2dd65bee2deeaa2aa966e592347
-
SHA512
0610a457833bea949da085306947e01583900bb47416798e072d131b3bc08477c3ef4cb4ee049a0d8fe1558f14dcee1790453bffd39ae49f411984ed9b6352db
-
SSDEEP
768:nij3df8ZJd+PnDVWl8zHPHXyXHCzcHHvzQBdi9vcIVSEFFoHa0ZKT:niuJdeVWl4vUv4WvcsFFoHxIT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8aa2527d121d41285fc9d1419b201edc7092b2dd65bee2deeaa2aa966e592347N
Files
-
8aa2527d121d41285fc9d1419b201edc7092b2dd65bee2deeaa2aa966e592347N.exe windows:4 windows x86 arch:x86
1cb01938b76b509cfd5211e63abab8b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord100
ord616
ord618
ord619
ord546
ord547
ord580
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ