Static task
static1
Behavioral task
behavioral1
Sample
3fa9d8306a5fcddddabe8342c98df8929d856c9be3db2cabb30fb7f94ec7ddfdN.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3fa9d8306a5fcddddabe8342c98df8929d856c9be3db2cabb30fb7f94ec7ddfdN.exe
Resource
win10v2004-20241007-en
General
-
Target
3fa9d8306a5fcddddabe8342c98df8929d856c9be3db2cabb30fb7f94ec7ddfdN
-
Size
36KB
-
MD5
856fd36b6745038a6dcfe096fa61ff90
-
SHA1
2f6abff61ad3f82a45d6c117f5683aaf37160956
-
SHA256
3fa9d8306a5fcddddabe8342c98df8929d856c9be3db2cabb30fb7f94ec7ddfd
-
SHA512
ce6d33819bf2ce55104e6be79805c18fd888cf13964592660d0cc8e0f4164f6df682bce8c4bbe263d44750e22775901fb1f27bcd5598d8ebc530ff41d143a013
-
SSDEEP
384:BHTcGB2lp6bV8obxAMlltLB6GFMan9FtFtFtDVyJ6LIXeYZefjeze7TvAIXes/kz:BHY6/bx3JfR9HHHCOxLMETvAIXesvX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fa9d8306a5fcddddabe8342c98df8929d856c9be3db2cabb30fb7f94ec7ddfdN
Files
-
3fa9d8306a5fcddddabe8342c98df8929d856c9be3db2cabb30fb7f94ec7ddfdN.exe windows:4 windows x86 arch:x86
245032a982d56b01ab1b9ee9988f5fdc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord662
ord593
ord594
ord598
ord520
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord645
ord100
ord546
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ