Static task
static1
Behavioral task
behavioral1
Sample
cb5964970e7aac8ffb5a78479da85074.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cb5964970e7aac8ffb5a78479da85074.exe
Resource
win10v2004-20240226-en
General
-
Target
cb5964970e7aac8ffb5a78479da85074
-
Size
615KB
-
MD5
cb5964970e7aac8ffb5a78479da85074
-
SHA1
a52fd0f783972a1fcd77547ea4da012864275cf5
-
SHA256
ed3ba6a2bdffc9058fc174ef07e3cf6f0da2cbc82e850ac473185a3a3fafefe0
-
SHA512
05bf8e2caa7cd908e6102e4e81018361769edec603cf3a8c99ff3f8edfba130a205c8d853b9f5a2a20e30941f110fd1c555069e15f8dad244e9874ade90185af
-
SSDEEP
12288:wwVsDZ+lFNCl6mtXyJwENBHlqemXkp6s4fOWqeV/yM/9IIJ4BhuOkTj:wwV0Pl6dRNBQXkp6nOWqeV/D/9IpDeT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb5964970e7aac8ffb5a78479da85074
Files
-
cb5964970e7aac8ffb5a78479da85074.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 613KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ