Static task
static1
Behavioral task
behavioral1
Sample
cbdf29a37a825a4be71233080c93493c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cbdf29a37a825a4be71233080c93493c.exe
Resource
win10v2004-20240226-en
General
-
Target
cbdf29a37a825a4be71233080c93493c
-
Size
693KB
-
MD5
cbdf29a37a825a4be71233080c93493c
-
SHA1
47e6424b7ab7b0749bf66e0199d7a920a81da9a9
-
SHA256
7de3dcdead5aa4bd83dc8e95816f55bfa0e3e95a2a2f21010ca8232ad5762875
-
SHA512
2148218f7fbcd47872dd83827e0a468efb76196c51d8ffabe98451e877321669903388a9879e2067b22ad959be4dd5ef14dec0ed61c6e0937371aeb05e802054
-
SSDEEP
12288:xnoBsW/VNXv/42WDpD3crMSLVVPxOskYbMZUP9DI9HbcsChd2fRvM2Uc+:FoiSNXv/42KpDsrhLVVPB5gu1DMofEp+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbdf29a37a825a4be71233080c93493c
Files
-
cbdf29a37a825a4be71233080c93493c.exe windows:4 windows x86 arch:x86
46e2837bbc7f5c4b0ae9c8d7097540ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetVersion
LocalFree
lstrcpyA
FreeLibrary
GetStartupInfoA
GetVersionExA
GlobalFree
LocalAlloc
GetTickCount
CreateEventA
Sleep
GlobalAlloc
GetFileSize
user32
GetSysColor
ShowWindow
DialogBoxParamA
MessageBoxA
GetClientRect
LoadIconA
DefWindowProcA
DestroyWindow
SetFocus
TranslateMessage
GetWindowRect
BeginPaint
CreateWindowExA
DispatchMessageA
gdi32
SetROP2
DeleteObject
SetBkMode
GetTextMetricsA
GetTextExtentPoint32A
CreateCompatibleDC
SelectObject
CreateSolidBrush
CreateFontIndirectA
GetDeviceCaps
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 686KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ