Static task
static1
Behavioral task
behavioral1
Sample
cbb1e2e09a00f059aa302d5cc5120aff.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cbb1e2e09a00f059aa302d5cc5120aff.exe
Resource
win10v2004-20240226-en
General
-
Target
cbb1e2e09a00f059aa302d5cc5120aff
-
Size
19KB
-
MD5
cbb1e2e09a00f059aa302d5cc5120aff
-
SHA1
75235454e0cabc421bc768a3a383b40330363cb5
-
SHA256
738f0c108d60d5ad3f554e8b9cd5388dbcea1fe45a4a27c4350dd1d9e086f729
-
SHA512
b55fc98aa06c7c52cf89d97eb460d79b244b3df55d675c2a00fd909c54c0ae19b3d51b6eddaa539eebc44239f4386de540431bfa51944163e69d045228c8a2be
-
SSDEEP
384:0zPDBvBMQNkNuWBMiSphvla+bcFiA4VfgOJn:0zPDBSAkNuqMiSphvs+QFiA4Vfgi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbb1e2e09a00f059aa302d5cc5120aff
Files
-
cbb1e2e09a00f059aa302d5cc5120aff.exe windows:4 windows x86 arch:x86
ebe8045066f2a1e15083d158896e5ea8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateIcon
GetWindowTextA
InsertMenuA
DrawTextA
CalcMenuBar
AppendMenuW
GetFocus
GetDC
GetWindowTextLengthA
GetMenu
IsMenu
DrawTextW
AlignRects
DrawIconEx
advapi32
RegEnumValueW
RegEnumKeyW
RegDeleteValueA
RegQueryValueA
RegFlushKey
RegCreateKeyExW
RegOpenKeyExA
RegDeleteValueW
RegQueryInfoKeyA
RegGetKeySecurity
RegLoadKeyA
RegQueryValueW
RegReplaceKeyA
RegCreateKeyExA
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteKeyA
RegQueryValueExW
RegEnumKeyExW
RegGetKeySecurity
RegQueryValueExW
RegReplaceKeyA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyW
RegFlushKey
RegCreateKeyExW
RegQueryValueW
RegQueryInfoKeyW
RegOpenKeyExA
RegCreateKeyW
RegQueryValueA
kernel32
CopyFileExA
CopyFileA
GetConsoleMode
FindAtomA
Sleep
GetFileTime
WriteFile
CreateThread
CopyFileW
DeleteFileW
GetLastError
GetCommandLineA
OpenFile
GetCPInfo
ReadConsoleA
OpenFileMappingA
GetCommandLineA
GetCPInfo
CopyFileW
DeleteAtom
FindAtomA
DeleteFileW
CopyFileExA
DeleteFileA
GetFileTime
ReadFile
GlobalFree
GetConsoleMode
GetStdHandle
SetLastError
GetComputerNameA
ReadFile
OpenFileMappingA
ReadConsoleA
CopyFileA
ExitThread
CopyFileW
DeleteFileW
DeleteAtom
CopyFileExA
CopyFileExW
WriteFile
GetFileTime
FindAtomA
GetFileSize
FindFirstFileA
DeleteFileA
gdi32
CancelDC
AddFontResourceTracking
RestoreDC
AbortPath
GetDCOrgEx
AddFontResourceExW
ClearBrushAttributes
SetTextColor
GetCurrentPositionEx
ClearBitmapAttributes
GetPixel
BitBlt
GetClipBox
RestoreDC
SetTextColor
AddFontResourceExA
AddFontResourceTracking
DeleteDC
BeginPath
CancelDC
GetBitmapBits
ExtTextOutA
AddFontResourceW
GetCurrentPositionEx
comctl32
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_DragMove
ImageList_Draw
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_Create
ImageList_Merge
ImageList_DragEnter
ImageList_LoadImageW
ImageList_GetImageRect
ImageList_Remove
ImageList_AddMasked
ImageList_GetImageCount
ImageList_DragMove
ImageList_Copy
ImageList_DrawIndirect
ImageList_Create
ImageList_Read
ImageList_Destroy
ImageList_GetIconSize
ImageList_DragLeave
ImageList_Replace
ImageList_LoadImageA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 259B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ