Static task
static1
Behavioral task
behavioral1
Sample
Crowbar.exe
Resource
win10-20240404-en
General
-
Target
Crowbar_2023-02-16_0.74.7z
-
Size
1.0MB
-
MD5
d9d853cc80eaf95e13dab4e9c41916ab
-
SHA1
cf1e5c89264e891f53e1c633217d5b055b3c1f0e
-
SHA256
a33d16ea4894ec01686e53d01c6a2b8f816f4abdaead7ece41262e03ffa9c13f
-
SHA512
06ce34d0fd91a01397029c1c2b9b6444b7ddcf2f9b01e5180b548e98308e35adf916d0fe766f058af6a7ce6d1bd232e8ab702edca0bf77ad63dd8d03f69a9ee0
-
SSDEEP
24576:4M+LNe5+A09HH3dcBWRNcKMJzXz5E3wYLbkt7hi0tz+iR:4m5+A09ntcBWlQXz+hb4hiOCg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Crowbar.exe
Files
-
Crowbar_2023-02-16_0.74.7z.7z
-
Crowbar.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ