Static task
static1
Behavioral task
behavioral1
Sample
cbff53a9d796f5c236f695c425b36640.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cbff53a9d796f5c236f695c425b36640.exe
Resource
win10v2004-20240226-en
General
-
Target
cbff53a9d796f5c236f695c425b36640
-
Size
200KB
-
MD5
cbff53a9d796f5c236f695c425b36640
-
SHA1
8255da7a9867b99baa7fb7a149742171380fc770
-
SHA256
ec03b5a8864c7053cfb41a5d1186679dd2501d8dd21a69f3b4292c62b48a22e7
-
SHA512
d86b00b06f931bccb4564fd8e6efe2d81bb65754ffad61a8bdd2cf5048bf100534f96976aeb52862e7d61a7b1aed538609ed6a89533e5069866d46616ac118f1
-
SSDEEP
3072:o92GIeaEkRkuGlxp4CGkN1fZltspZgSeyQ07pjJ5DCGUnLcY9egxrfMLEhIquRn:oIGIeEI1fepZ5tdCL9dtIqup
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbff53a9d796f5c236f695c425b36640
Files
-
cbff53a9d796f5c236f695c425b36640.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.nos Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ