Static task
static1
Behavioral task
behavioral1
Sample
cbde248a869fca0ef438a3da7e82326a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cbde248a869fca0ef438a3da7e82326a.exe
Resource
win10v2004-20240226-en
General
-
Target
cbde248a869fca0ef438a3da7e82326a
-
Size
141KB
-
MD5
cbde248a869fca0ef438a3da7e82326a
-
SHA1
2d269e38c886d3b6a43235c6be152289713d111c
-
SHA256
8d54c2642c5f05dcf8f515b47626ee52b0258db0d1488063e33cdba8e0653dd7
-
SHA512
72cd89aeb4c1b662b25ddf465963618014c854a90a4fda04e34c2366d3db8a28f099dc3ae9dc9f63f5260a39891a76eb8095eacb341ce051db944a8030125b6c
-
SSDEEP
3072:yFhp5q0MpqZPPXAd8Yov/x1SdhqtREW5ZCHICDEapue/142:k75qpkZk8nbSdhEytnYeuP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbde248a869fca0ef438a3da7e82326a
Files
-
cbde248a869fca0ef438a3da7e82326a.exe windows:4 windows x86 arch:x86
7689f1a56236a48038b2d0de2f4a44fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextVolumeA
lstrcpy
SetEnvironmentVariableA
GetModuleFileNameW
GlobalWire
GetNextVDMCommand
SetThreadPriority
GetSystemTimeAdjustment
user32
SetForegroundWindow
MonitorFromRect
BroadcastSystemMessageW
ChangeDisplaySettingsW
CloseDesktop
FindWindowExA
SetDlgItemTextW
SendMessageA
WINNLSEnableIME
CharPrevExA
IMPSetIMEA
RegisterDeviceNotificationA
SetWindowLongW
SetScrollPos
SetScrollInfo
gdi32
SetDCBrushColor
Sections
.code Size: 9KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pack32 Size: 1KB - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ