Static task
static1
Behavioral task
behavioral1
Sample
cab098bc2b8f33f7925497ea736316c5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cab098bc2b8f33f7925497ea736316c5.exe
Resource
win10v2004-20240226-en
General
-
Target
cab098bc2b8f33f7925497ea736316c5
-
Size
221KB
-
MD5
cab098bc2b8f33f7925497ea736316c5
-
SHA1
56d0801e76d6e89126c540ba8eeb0fce2ac6f6c9
-
SHA256
da315a739256e8fa2624d009914881af2e63e5064a23f394db50a3d3650d86f1
-
SHA512
200b5d7504ed3cfc16bf1f9068d988b5c0ede56a67ef9ef02a7dc8d0f75769e285ac487b210fdc760beb4f775e3969f338d8c30871d5dd568c52877496237108
-
SSDEEP
3072:unu+q70cr+EXKEb2VVfvfLIa2nNcjrQIUBh2aTdtBZXHo2K:uu+Sr+mKDVnfLN8N/tBZXe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cab098bc2b8f33f7925497ea736316c5
Files
-
cab098bc2b8f33f7925497ea736316c5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ