Static task
static1
Behavioral task
behavioral1
Sample
d3159be7517cd8439f863525dba9aa7e48ec4a5182ea1148b83f9cda0f6f2cc8N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3159be7517cd8439f863525dba9aa7e48ec4a5182ea1148b83f9cda0f6f2cc8N.exe
Resource
win10v2004-20241007-en
General
-
Target
d3159be7517cd8439f863525dba9aa7e48ec4a5182ea1148b83f9cda0f6f2cc8N
-
Size
31KB
-
MD5
347fa085f335ce3443601d6c6d175120
-
SHA1
d1a218192844d7a8cea5ea1180f379fdd34f0889
-
SHA256
d3159be7517cd8439f863525dba9aa7e48ec4a5182ea1148b83f9cda0f6f2cc8
-
SHA512
6293e41959f61b207afb46e34397a79a793fc151769a15792c7c1c8cab2a8f54858c9f16c6dd6d365be809ce9b1fa2d5d6554730da65ccb009936d9540cae1d1
-
SSDEEP
768:Am82zttu1CCVjDKV2h40ZBTS4+kgRDnpFA9+Ss/:Amhza1hog4M9Yk2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3159be7517cd8439f863525dba9aa7e48ec4a5182ea1148b83f9cda0f6f2cc8N
Files
-
d3159be7517cd8439f863525dba9aa7e48ec4a5182ea1148b83f9cda0f6f2cc8N.exe windows:4 windows x86 arch:x86
4ea078fc915dbe05f01a265f724ef945
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHBrowseForFolder
msvbvm60
MethCallEngine
ord663
ord556
ord669
ord703
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord538
ord570
ord100
ord432
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ