Static task
static1
Behavioral task
behavioral1
Sample
cbdbd10a0051a1061cab8027eabeecfdb4b596fd05d88a74732260b4620bc6c5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cbdbd10a0051a1061cab8027eabeecfdb4b596fd05d88a74732260b4620bc6c5.exe
Resource
win10v2004-20240226-en
General
-
Target
cbdbd10a0051a1061cab8027eabeecfdb4b596fd05d88a74732260b4620bc6c5
-
Size
146KB
-
MD5
80b7753918d807edcdde29499b63f99c
-
SHA1
127a4f7722cf03fe8569303aa1992e7a80e68254
-
SHA256
cbdbd10a0051a1061cab8027eabeecfdb4b596fd05d88a74732260b4620bc6c5
-
SHA512
afab007dba93db1049dcafeeca8447fecf00377fd1789cb3fd8563a515c1b9e319a9c8c927e39bffe08df70a70aa61c35f96ab221e1a7ff75c104d40cfdb20f8
-
SSDEEP
3072:46zOtA9ah1lr29aARJArgKdVqPcAlyiO4XD5vnzWoCjhgBU:46zwMaFr2FAEKXAl9Os9fzWoCt7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbdbd10a0051a1061cab8027eabeecfdb4b596fd05d88a74732260b4620bc6c5
Files
-
cbdbd10a0051a1061cab8027eabeecfdb4b596fd05d88a74732260b4620bc6c5.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 141KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE