Static task
static1
Behavioral task
behavioral1
Sample
cbc81630a275625ef4ec92b3d2aa9574.exe
Resource
win7-20240221-en
General
-
Target
cbc81630a275625ef4ec92b3d2aa9574
-
Size
88KB
-
MD5
cbc81630a275625ef4ec92b3d2aa9574
-
SHA1
b5df2db238f653b49046f14d61993fd80559dee5
-
SHA256
cf2048468a1d6681fa7fdcc8b743dac9de44e3a76f48fa24e45b27e518038a52
-
SHA512
1e3f7a095aaa623ef51e5cdd9a821c792fe63c78bcc94dd908505af5741b819076edb0683759c1f1f81ff8b8829f8674c030462d274ad45fc654a1d9d5d61a4a
-
SSDEEP
1536:cx5U/NStfwj+mjgC2ycQ/0V2TmCCGqgCenBtgFiGFKq:cfENqwGC2y2kT+Gw4dnq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbc81630a275625ef4ec92b3d2aa9574
Files
-
cbc81630a275625ef4ec92b3d2aa9574.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 80KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE