Static task
static1
Behavioral task
behavioral1
Sample
cb225661c987049bf363fa619496b15c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb225661c987049bf363fa619496b15c.exe
Resource
win10v2004-20240226-en
General
-
Target
cb225661c987049bf363fa619496b15c
-
Size
92KB
-
MD5
cb225661c987049bf363fa619496b15c
-
SHA1
c83f5383315ee42ca65127cb32f70ed10a1fe9d0
-
SHA256
fbf3a7baa5927d504978c2e85715039f2329a12abd5260920f4ad0066c174493
-
SHA512
538bc16ebcb721b071008362f9877a36e80ec580012f14f76700c9d584081d6e8cd48dbf8f68f535c4ad3eab4e02f1bfa1d0a252bd09d430502501e60da25d35
-
SSDEEP
1536:F8gzQb7cTO4YTnBlXpcn5RvPGZvaQqMOOg8WhwIED9pl4b:GgzKZ5TBlXi+7qM9g882Dzl4b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource cb225661c987049bf363fa619496b15c
Files
-
cb225661c987049bf363fa619496b15c.exe windows:4 windows x86 arch:x86
1483bd8d311bdb73370a1308ddcba89d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
LoadLibraryA
VirtualAlloc
lstrcatA
CloseHandle
lstrcpynA
ExpandEnvironmentStringsA
TlsGetValue
GetModuleHandleA
lstrcpyA
GetSystemTime
GetCommandLineA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetProcAddress
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
GetStringTypeW
user32
KillTimer
GetGuiResources
ole32
CoInitialize
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ