Static task
static1
Behavioral task
behavioral1
Sample
cfdc12f81bbb610744118beca34e773ca101e72c9d176237539808af139bf5e2.exe
Resource
win7-20231129-en
General
-
Target
cfdc12f81bbb610744118beca34e773ca101e72c9d176237539808af139bf5e2
-
Size
900KB
-
MD5
8504aa4c89223a80aafb271782a6b0b3
-
SHA1
6b7f626bb85c04abd00bd968dd8fa1dce7df48cb
-
SHA256
cfdc12f81bbb610744118beca34e773ca101e72c9d176237539808af139bf5e2
-
SHA512
57a769e5c7a62053c468a2435014730506f3a81480d846275d9a75067a1c3f281527ea29e1956ad4259005ddd331fbe5c02eaf95e259b36822806d1152c53bdc
-
SSDEEP
24576:h1s87DK7pUC9raY6cebf4h7/4ucP0Ia3rNW:rVDmlg82c7QuK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfdc12f81bbb610744118beca34e773ca101e72c9d176237539808af139bf5e2
Files
-
cfdc12f81bbb610744118beca34e773ca101e72c9d176237539808af139bf5e2.exe windows:6 windows x86 arch:x86
2388fee6ad8ce4f4a35dbaf64e2da01a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
EnumDisplayDevicesA
advapi32
CredEnumerateA
comctl32
PropertySheet
Sections
Size: - Virtual size: 1.3MB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE