Static task
static1
Behavioral task
behavioral1
Sample
cb85e2e646f182f9ee1f1465aef6d31c2e53d0fd5ba43a31119ec1fe802e6cfc.exe
Resource
win7-20230831-en
General
-
Target
cb85e2e646f182f9ee1f1465aef6d31c2e53d0fd5ba43a31119ec1fe802e6cfc
-
Size
3.4MB
-
MD5
bb909942e40f03885dcfb532fd46b345
-
SHA1
60ecd4629e8c6d55d74fe3ac3c7a0be888cdb3bb
-
SHA256
cb85e2e646f182f9ee1f1465aef6d31c2e53d0fd5ba43a31119ec1fe802e6cfc
-
SHA512
7a626abafb5e509e35de24461746125a5a8eaad2ef943f3b63b16b70707f426d8416b8e5d8978e5baf51fb276e6db576c78149e7121cdf2c8e1238755c5c8bdb
-
SSDEEP
98304:o3yEMCSpHX0QstYMi2kGI7UrCpoGj6c7gn82Ywt:VEM/pQtYX2kDQWow68uYwt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb85e2e646f182f9ee1f1465aef6d31c2e53d0fd5ba43a31119ec1fe802e6cfc
Files
-
cb85e2e646f182f9ee1f1465aef6d31c2e53d0fd5ba43a31119ec1fe802e6cfc.exe windows:4 windows x86
56108d1c2112b9b8cf5d8bae65ce52d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutWrite
ws2_32
WSACleanup
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
kernel32
GetVersion
user32
GetSysColorBrush
gdi32
FillRgn
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
CryptAcquireContextA
shell32
ShellExecuteA
ole32
CoRevokeClassObject
oleaut32
SysStringLen
comctl32
_TrackMouseEvent
oledlg
ord8
wininet
FindNextUrlCacheEntryA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.3MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ