Static task
static1
Behavioral task
behavioral1
Sample
cd320402ca64cd9e1a831f8b12d039ad.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd320402ca64cd9e1a831f8b12d039ad.exe
Resource
win10v2004-20240226-en
General
-
Target
cd320402ca64cd9e1a831f8b12d039ad
-
Size
2.0MB
-
MD5
cd320402ca64cd9e1a831f8b12d039ad
-
SHA1
26c85b3293670b592a7a57e5c141f2c704876faf
-
SHA256
d4abc502955492c69d3fda7b3155fdcc80f344fb77d6c3a4bc9978d321d1fd48
-
SHA512
2d706c0c5ccac9637f23c368d0e321141815625995a91e0ec4de5a938eb148f95fcdad2de43d16ba0b794810ae88b795954e0224bae4099c3887a13d66c91b47
-
SSDEEP
49152:PSB/iFEWhWOTzlYIwD7/A9tQcKlyhty13IMeB2UlcAT:TFzWRT/YtElat4jdU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd320402ca64cd9e1a831f8b12d039ad
Files
-
cd320402ca64cd9e1a831f8b12d039ad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Info Size: 1.9MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE