Static task
static1
Behavioral task
behavioral1
Sample
cb8dac992a0224a748edf1ec0d3005f0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb8dac992a0224a748edf1ec0d3005f0.exe
Resource
win10v2004-20240226-en
General
-
Target
cb8dac992a0224a748edf1ec0d3005f0
-
Size
189KB
-
MD5
cb8dac992a0224a748edf1ec0d3005f0
-
SHA1
2bf26aea1e18d4e18cd73942f2231b869454775f
-
SHA256
c45452dd62c6cc4767d9519d7c27ddadd726636d42f0a7e521721b486747e275
-
SHA512
a1afd09ada81a4638ca9e32aa1a36cfd90ccaa4dd968c27ce2672cda4367aeb44246ce99161db42e213916fd23facda9ce6ceaada499b2508eea66672e1ec9a3
-
SSDEEP
1536:maUmYHCWx1yUGP/gh51DpZR+qjWX/D7X4o8:maUmYHCWx1yx3o51DhjjWX4o8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb8dac992a0224a748edf1ec0d3005f0
Files
-
cb8dac992a0224a748edf1ec0d3005f0.exe windows:1 windows x86 arch:x86
4bdfbff5846b3eb3852c76d52360b619
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
kernel32
DeleteFileA
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
GetTickCount
CopyFileA
MoveFileA
CreateDirectoryA
RtlUnwind
SetFileAttributesA
Sleep
CreateMutexA
CreateThread
user32
GetWindowTextA
GetForegroundWindow
GetKeyState
GetAsyncKeyState
CharUpperBuffA
advapi32
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
ws2_32
WSACleanup
inet_addr
htons
getsockname
socket
gethostbyname
connect
closesocket
WSAStartup
send
select
recv
crtdll
_iob
_itoa
__GetMainArgs
_strnicmp
atoi
exit
fputc
localeconv
memcpy
memmove
memset
pow
raise
rand
signal
srand
strcat
strchr
strcmp
strncmp
strncpy
strstr
strtok
strtol
wcslen
wctomb
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE