Static task
static1
Behavioral task
behavioral1
Sample
cdb7a5ff01c0039938590fded88eff9a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cdb7a5ff01c0039938590fded88eff9a.exe
Resource
win10v2004-20231215-en
General
-
Target
cdb7a5ff01c0039938590fded88eff9a
-
Size
60KB
-
MD5
cdb7a5ff01c0039938590fded88eff9a
-
SHA1
6c0ba55681773c967c87ef6f9440443d2468daa5
-
SHA256
20f4fbdf739c842050002b490737e39b3a0c712c98f08278eaf6e70474a70dff
-
SHA512
bdd87d5d877f24b96b244fe37062ea93978a72546abc185231ae2cb94aee6438bfc3e58dee204b3527d494527c10b382575e6b4bb0807301a149cf24b06a4f82
-
SSDEEP
1536:ORakVLtw6LLezrP/AtcpmefJTpWhW0SqnIQIs:OZtwaQrPYqpmYRYhfpIQIs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdb7a5ff01c0039938590fded88eff9a
Files
-
cdb7a5ff01c0039938590fded88eff9a.exe windows:5 windows x86 arch:x86
61a2e1861d48e9e9d9c512260b46bd42
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
LoadCursorA
IsWindowVisible
IsWindow
WindowFromPoint
BeginPaint
SetWindowTextA
EndPaint
RegisterClassExW
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
gdi32
FrameRgn
CreateFontIndirectA
DeleteObject
GetTextColor
SetRectRgn
ole32
CoInitialize
kernel32
GetLastError
GetThreadLocale
GetEnvironmentStrings
HeapCreate
GetPrivateProfileStringA
GetExitCodeProcess
InitializeCriticalSection
EnterCriticalSection
LoadLibraryA
GetProcAddress
HeapFree
GetTickCount
GetDateFormatA
HeapDestroy
HeapAlloc
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ