Static task
static1
Behavioral task
behavioral1
Sample
cdfd9630abbadb53a09ee5ed2b64b0ce.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cdfd9630abbadb53a09ee5ed2b64b0ce.exe
Resource
win10v2004-20240226-en
General
-
Target
cdfd9630abbadb53a09ee5ed2b64b0ce
-
Size
47KB
-
MD5
cdfd9630abbadb53a09ee5ed2b64b0ce
-
SHA1
92366de4a97b674236915e612e5380bee2b5deae
-
SHA256
e8744768a8cb70b19fa6e41c5cd799ab2c52d5540e48186aad08d8931e6bdbac
-
SHA512
977a186ca559a934a18df7689f49f99bbee05800afba6f8297f2f8e443e98ae89f4cecf8c790596a1625caa15b8e9607a2bef16d8886b08a1b9e7ec5d681c886
-
SSDEEP
768:RDWaXOJ9bIW+P+BuO7WPJ4+L2FZ2z1rIRDbSvcdIpOi02e3v8Ykn:gaXOnZ+HOS2pz6IRDbvviiwn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdfd9630abbadb53a09ee5ed2b64b0ce
Files
-
cdfd9630abbadb53a09ee5ed2b64b0ce.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE