Static task
static1
Behavioral task
behavioral1
Sample
cb14599be1244383f956b5217741dd07.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cb14599be1244383f956b5217741dd07.exe
Resource
win10v2004-20230220-en
General
-
Target
cb14599be1244383f956b5217741dd07.exe
-
Size
2.3MB
-
MD5
cb14599be1244383f956b5217741dd07
-
SHA1
594723a7a51e5cd76a4a8de27dcc41b2b102eff8
-
SHA256
ae6d04788360a1bee982e06ac93f0bbce04c0b8c4b754a57f2f1385519d6c721
-
SHA512
5555f283e32839dd7b06a74633c4654d3ae41b45f66c494c248c60391f949cf4ea94204d93702f976af5a989bc6f1aad05f4e9989a51f216e85af0e91e0337fe
-
SSDEEP
49152:1ZRiYmI5cMYNFMEDsGLKxkQARvBG7y3rWb+:1ZR9hYFMog/ABByy7Wq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb14599be1244383f956b5217741dd07.exe
Files
-
cb14599be1244383f956b5217741dd07.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ