Static task
static1
Behavioral task
behavioral1
Sample
0733586bcb4a5c790d24d255db9ff35ac0450ea8c9615a61f6059e91898d1cb7.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
0733586bcb4a5c790d24d255db9ff35ac0450ea8c9615a61f6059e91898d1cb7.exe
Resource
win10v2004-20241007-en
General
-
Target
0733586bcb4a5c790d24d255db9ff35ac0450ea8c9615a61f6059e91898d1cb7
-
Size
468KB
-
MD5
c5db722ac0f6116c9471904b81957310
-
SHA1
71c5da5eb69f4e39a388a3208c413ef6d2db88a2
-
SHA256
0733586bcb4a5c790d24d255db9ff35ac0450ea8c9615a61f6059e91898d1cb7
-
SHA512
e4da92a13e2a960e9c01b7826d36e51e86e0b51d244ccc88ca89727f5769ae0e5e1554f7fa7a263f97c6206188824733fdbc05c97a665a72a08543c79755145e
-
SSDEEP
3072:lhAoogIIIx5KtbY3Pztjcf8/GCtvYRpirjHeLVhRuV788+BP5Xlb:lhboBXKtQPJjcfjXvduVozBP5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0733586bcb4a5c790d24d255db9ff35ac0450ea8c9615a61f6059e91898d1cb7
Files
-
0733586bcb4a5c790d24d255db9ff35ac0450ea8c9615a61f6059e91898d1cb7.exe windows:4 windows x86 arch:x86
5d6cad172c5535e4b6b6bbd246571621
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
ord588
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord593
ord594
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaPutOwner3
DllFunctionCall
_adj_fpatan
__vbaRedim
__vbaStrR8
EVENT_SINK_Release
ord600
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaGetOwner3
__vbaUbound
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
ord570
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarMod
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaFPInt
__vbaUI1Var
_CIexp
__vbaFreeStr
__vbaFreeObj
Sections
.text Size: 12.2MB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ