Static task
static1
Behavioral task
behavioral1
Sample
cb5eca75dc93427d752fff78bf24e09cba9c0520ea6c804fd5cde2bb47d94aca.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cb5eca75dc93427d752fff78bf24e09cba9c0520ea6c804fd5cde2bb47d94aca.exe
Resource
win10v2004-20230220-en
General
-
Target
cb5eca75dc93427d752fff78bf24e09cba9c0520ea6c804fd5cde2bb47d94aca
-
Size
28KB
-
MD5
e5acb84f281c998e36d7ad61a4abbb3a
-
SHA1
8f6ff6089a65de9fc3fd8570e9fd7a568b5be61e
-
SHA256
cb5eca75dc93427d752fff78bf24e09cba9c0520ea6c804fd5cde2bb47d94aca
-
SHA512
de15c04da36fb31c5dbcbe34d92e4a844b85bd6234c796b720035df522daaca63a1b9cb2842713cd8f8353af1a5d1935fa20ee23bfeb7fda8f6a521345eb04a1
-
SSDEEP
384:hyUlBovrXgaK5JN2ZA6HSSXj9yOd0lrW:hysobInNi37RdCrW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb5eca75dc93427d752fff78bf24e09cba9c0520ea6c804fd5cde2bb47d94aca
Files
-
cb5eca75dc93427d752fff78bf24e09cba9c0520ea6c804fd5cde2bb47d94aca.exe windows x86
b73bde69c70072679dc4d91eaf3bca60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
WideCharToMultiByte
LoadLibraryA
OutputDebugStringA
Sleep
GetProcAddress
WaitForSingleObject
OpenProcess
CreateThread
GetModuleHandleW
user32
LoadCursorW
LoadIconW
RegisterClassW
CreateWindowExW
GetWindowLongW
SetWindowLongW
ShowWindow
UpdateWindow
GetMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
PostQuitMessage
DefWindowProcW
PostMessageW
mfc42u
ord823
ord540
ord2910
ord5568
ord5679
ord4124
ord858
ord800
ord535
ord825
msvcrt
_CxxThrowException
memmove
_exit
_XcptFilter
exit
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
_controlfp
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
_wtoi
strncpy
_access
atoi
sprintf
wcslen
__CxxFrameHandler
??1exception@@UAE@XZ
msvcp60
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??_7out_of_range@std@@6B@
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ