Static task
static1
Behavioral task
behavioral1
Sample
cd85f78e533444c859f50552a6b6696d.exe
Resource
win7-20240221-en
General
-
Target
cd85f78e533444c859f50552a6b6696d
-
Size
2.3MB
-
MD5
cd85f78e533444c859f50552a6b6696d
-
SHA1
4539e16de0e40da62ff833c0632f1359ac542bd9
-
SHA256
28803d6a8d4280f78c386d3f7c85107ad2b926579741a71b221d6f2347d8fe1c
-
SHA512
cbe82465f4a2f181b0c3213ce0d63eb649d0a0d64cfcd3b9254aaf5e7a35916d1a1bd68e64706e3316d65e4718819c8b228de41d9eb972f07b212175066ec806
-
SSDEEP
49152:DdP23WZv7gYg+JyXceBM6FMDH5y0JFKrdsLk70wGXm:p2mN7gvExKcZyYFKph7bG2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd85f78e533444c859f50552a6b6696d
Files
-
cd85f78e533444c859f50552a6b6696d.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ