Static task
static1
Behavioral task
behavioral1
Sample
cbd8e51f7c30cd1fd8c2fa819538f214.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cbd8e51f7c30cd1fd8c2fa819538f214.exe
Resource
win10v2004-20240226-en
General
-
Target
cbd8e51f7c30cd1fd8c2fa819538f214
-
Size
18KB
-
MD5
cbd8e51f7c30cd1fd8c2fa819538f214
-
SHA1
4ae038fa31241c7652cfe533aa3f78e4c1239aa5
-
SHA256
a2329073a9cb4024672739b466ccf9675c9d389cee1dcae6dc1bb74317b2dcc6
-
SHA512
9e69a8efd3b5e13e3a03bbcbefd02be4857fc3196393c2ec704bd73b2361da7ba157be96cf694cbbc99551994903d87e698d1e05c6b35d4f24018e8a86e6f884
-
SSDEEP
192:66r7NNXNxNJ+fCHVFbIowDp7343DerKttI5uTh8ZMf24oH7s61Ncijo:rr7rNxf+aPlDeuO8njF/ijo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbd8e51f7c30cd1fd8c2fa819538f214
Files
-
cbd8e51f7c30cd1fd8c2fa819538f214.exe windows:4 windows x86 arch:x86
7af66b81b04dd5e5498ed3e705776691
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
InterlockedExchange
VirtualProtect
GetModuleHandleA
HeapCreate
CloseHandle
GetCommandLineA
GlobalUnlock
GetAtomNameA
HeapReAlloc
GetStdHandle
LoadLibraryExA
lstrlenA
WaitForMultipleObjects
SetConsoleCP
GetSystemDefaultLangID
GetVersion
GetConsoleCP
GetTickCount
CompareFileTime
SuspendThread
user32
CreateMenu
FillRect
DrawCaption
FindWindowA
DispatchMessageA
DragDetect
GetKeyboardLayout
InvertRect
SetWindowPos
GetKeyState
DialogBoxParamA
GetCursorInfo
IsDialogMessage
DragObject
SetPropA
GetDlgItem
DestroyMenu
CreateIcon
SetScrollInfo
InsertMenuA
winmm
auxSetVolume
OpenDriver
PlaySoundA
auxGetVolume
CloseDriver
version
VerQueryValueA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ