Static task
static1
Behavioral task
behavioral1
Sample
cbc1564dbb9f4fb21f9bd5476f76a6d51cd067968e461af9ecd6c6d4df492650.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
cbc1564dbb9f4fb21f9bd5476f76a6d51cd067968e461af9ecd6c6d4df492650.exe
Resource
win10v2004-20230915-en
General
-
Target
cbc1564dbb9f4fb21f9bd5476f76a6d51cd067968e461af9ecd6c6d4df492650
-
Size
4.0MB
-
MD5
c56d8b7978ad2facbe09f254e9a1fcf5
-
SHA1
8cd1880684106542624e0ee73c55d906480b62b7
-
SHA256
cbc1564dbb9f4fb21f9bd5476f76a6d51cd067968e461af9ecd6c6d4df492650
-
SHA512
466dc1fd805bd6d611138b00c689b1c15def2bb8b932ac3a809e8c1f44eb86c13022fb43ce908c9c78259dfa7f9dadb76a2c6af9eb8ea4541819742e468d5c2a
-
SSDEEP
98304:2xIC5IcPnowNyr9r9z7dTL34FEmVK3yVH:ut09r9zxfaEoV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbc1564dbb9f4fb21f9bd5476f76a6d51cd067968e461af9ecd6c6d4df492650
Files
-
cbc1564dbb9f4fb21f9bd5476f76a6d51cd067968e461af9ecd6c6d4df492650.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4.5MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 268KB - Virtual size: 268KB
IMAGE_SCN_MEM_READ