Static task
static1
Behavioral task
behavioral1
Sample
cb477b9d12a28f43169e238b6dccd479.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb477b9d12a28f43169e238b6dccd479.exe
Resource
win10v2004-20240226-en
General
-
Target
cb477b9d12a28f43169e238b6dccd479
-
Size
99KB
-
MD5
cb477b9d12a28f43169e238b6dccd479
-
SHA1
07f2a864f1d5c32a7c2da26880be694833dbec55
-
SHA256
f38b5df40d18aa4d5d05b85a42ad72aa2db84415ab65d42edc5cee85a41148dd
-
SHA512
f8fd5131ea557bd0f60014f8eb9ed0d87ae75030c6b6c11cfad2f7ed41ff15d1efca53b0c688014652cd761fca26f50a565afdb61273b3692d0ef4b64387d540
-
SSDEEP
3072:Eh5FFLCLM72K9FOLAI/9nv/vf4tQcItPJWL:MT1KMaK9rmnffpcIt4L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb477b9d12a28f43169e238b6dccd479
Files
-
cb477b9d12a28f43169e238b6dccd479.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
x Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
m Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hroxnn Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE