Static task
static1
Behavioral task
behavioral1
Sample
cd6ffb1f6576d368b36ea8c6242aa30c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd6ffb1f6576d368b36ea8c6242aa30c.exe
Resource
win10v2004-20240226-en
General
-
Target
cd6ffb1f6576d368b36ea8c6242aa30c
-
Size
28KB
-
MD5
cd6ffb1f6576d368b36ea8c6242aa30c
-
SHA1
03d8699722bbcfcf35524332f570a36d3bdb3874
-
SHA256
4e86022ed628f231785e19586901f7312185177a9041e3a786ac5ab667b654e4
-
SHA512
ed13b446572152a117bdadbc235dca4138ef4f212b749af71497d58c19d1b39bdbd83ed241b1e4269494ddbefc92eec105fe3a534927accf2facc3a5e9e4c394
-
SSDEEP
768:Wr22BDIKhuKqZqhsSsZ1f1S2XHpoHXDyuj7Mq1:W62BUKhxhsvP3pif1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd6ffb1f6576d368b36ea8c6242aa30c
Files
-
cd6ffb1f6576d368b36ea8c6242aa30c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
33333330 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
33333331 Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ