Static task
static1
Behavioral task
behavioral1
Sample
cd0ee1ebb268a416f1bc47a5c9cdb622.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd0ee1ebb268a416f1bc47a5c9cdb622.exe
Resource
win10v2004-20240226-en
General
-
Target
cd0ee1ebb268a416f1bc47a5c9cdb622
-
Size
34KB
-
MD5
cd0ee1ebb268a416f1bc47a5c9cdb622
-
SHA1
e9ddcbddaee85c7ab048b5f35ac580b672399753
-
SHA256
40abb7df4c26e4a85ea7420a4970bc9e9c757bee01685d9a7fb6f23215151051
-
SHA512
c5a92d09ab5b90d61d96465fa4ec2d81e72ed728149dd2de992d300a957ebc80684a3f6c1395987a0e7d3d116934eec28b501e3b5178ffceb3e5801933b1f666
-
SSDEEP
768:MtyPWu1+Yb9k/q4ybihQlusaNpfNIElZh/xHuqFtob:aZab9dxxlusaNpfNIElZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd0ee1ebb268a416f1bc47a5c9cdb622
Files
-
cd0ee1ebb268a416f1bc47a5c9cdb622.exe windows:4 windows x86 arch:x86
4cb46614cb4685657365f53eb7bba72a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
Sections
.MPRESS1 Size: 33KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE