Static task
static1
Behavioral task
behavioral1
Sample
cdb2d2ec5fb6bf12bcf6e4d31dfb574c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cdb2d2ec5fb6bf12bcf6e4d31dfb574c.exe
Resource
win10v2004-20240226-en
General
-
Target
cdb2d2ec5fb6bf12bcf6e4d31dfb574c
-
Size
275KB
-
MD5
cdb2d2ec5fb6bf12bcf6e4d31dfb574c
-
SHA1
d7f677f3855e67674fbb6fd3630207c2e151dd63
-
SHA256
e3909bd9697e7dfb009daaf63f3fc537fac0b063f0cc206071573b1e3f860ef0
-
SHA512
4c8ef7096564d995e9a48a2260202ab7c60eecbb0cafad8b637ab10048a581a318ca9712aa7e7caa59aa3d9f77fbb48cf9b23c0351a21bafcc88975e5f81cc2f
-
SSDEEP
6144:tsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsu:tsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdb2d2ec5fb6bf12bcf6e4d31dfb574c
Files
-
cdb2d2ec5fb6bf12bcf6e4d31dfb574c.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE