Static task
static1
Behavioral task
behavioral1
Sample
cb3e32d906a647830fb34edf9b779d2439e65b9f5f3df75feea08018bd2bddc0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cb3e32d906a647830fb34edf9b779d2439e65b9f5f3df75feea08018bd2bddc0.exe
Resource
win10v2004-20230220-en
General
-
Target
cb3e32d906a647830fb34edf9b779d2439e65b9f5f3df75feea08018bd2bddc0
-
Size
272KB
-
MD5
01a26479f3a36c51f42a79265de0b491
-
SHA1
781a992dae88bdceca65a80feda9490ea8765ad9
-
SHA256
cb3e32d906a647830fb34edf9b779d2439e65b9f5f3df75feea08018bd2bddc0
-
SHA512
727226b22f7213f7209de450628a074c3b1ef7143a8cf7981d68fd1804ea25a5b3c70d7c61f8447ed52da10331256cc6b79cc9bc04945147fb3a63e771d83bef
-
SSDEEP
3072:06kk77tkKTS661UqiHPi9YxoA18kDR6wL:wk9kkSR2qiHPiQ2kDRVL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb3e32d906a647830fb34edf9b779d2439e65b9f5f3df75feea08018bd2bddc0
Files
-
cb3e32d906a647830fb34edf9b779d2439e65b9f5f3df75feea08018bd2bddc0.exe windows x86
88b1a849069ead0b53e0400e4242f6bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
HeapReAlloc
VirtualAlloc
HeapAlloc
HeapValidate
LCMapStringW
LCMapStringA
SetStdHandle
GetStringTypeA
MultiByteToWideChar
SetConsoleCtrlHandler
GetLastError
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
FlushFileBuffers
GetStringTypeW
WinExec
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
SetUnhandledExceptionFilter
CloseHandle
user32
EndDialog
LoadStringA
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
advapi32
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ