Static task
static1
Behavioral task
behavioral1
Sample
cb18d6022b9a4d1c4a0f6dde74ab3313.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb18d6022b9a4d1c4a0f6dde74ab3313.exe
Resource
win10v2004-20240226-en
General
-
Target
cb18d6022b9a4d1c4a0f6dde74ab3313
-
Size
120KB
-
MD5
cb18d6022b9a4d1c4a0f6dde74ab3313
-
SHA1
ef54c9cac9a6191e793b5f5254e6030f41405b5a
-
SHA256
cab18c25c7312363768bb2df19e8a1b279f7f61d689a17d63a1865b4622da47d
-
SHA512
67f19e92be978b419831db0b073c9b28fe090d855d0cca1ab86508362a8e2dd4d52985e1a59c57555d3c1671b9ada55d5ac7e02f12aab50855dc1b7f560ce83c
-
SSDEEP
1536:yAMBsjV5EdBqgHaEoSw0CYl21Ah8aTxH9fdoFy8ecA9YW8cFP1PYbN43hTI7T5rw:lMBsR+YEo7AHdHAFvzXIPybK3OBw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb18d6022b9a4d1c4a0f6dde74ab3313
Files
-
cb18d6022b9a4d1c4a0f6dde74ab3313.exe windows:4 windows x86 arch:x86
79b3362178937bf9559741c46bb9e035
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sections
pqtht Size: - Virtual size: 139KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pqthta Size: - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 400KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x Size: 120KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ