Static task
static1
Behavioral task
behavioral1
Sample
cbbd0be54741a7a7d9531fa364af82444808f8c54c3ed8358bbc22061effb75b.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
cbbd0be54741a7a7d9531fa364af82444808f8c54c3ed8358bbc22061effb75b.exe
Resource
win11-20240426-en
General
-
Target
cbbd0be54741a7a7d9531fa364af82444808f8c54c3ed8358bbc22061effb75b
-
Size
1.9MB
-
MD5
517a16d4548e409331739171eb1f5df4
-
SHA1
6731e6d01bc9ce53eca7542c403c0511eb6291d5
-
SHA256
cbbd0be54741a7a7d9531fa364af82444808f8c54c3ed8358bbc22061effb75b
-
SHA512
bc5d44785890f9ce7438cb5a1efd0d67699015e25cb8626e28eacea0af014e1620e3b6e34cde851433b628840e18c789e04ae443fbe6aa5f7c66a2525c64eb47
-
SSDEEP
49152:V+E0G6EwRGuwk4aWLD1xRQTviFY01c0ZBJF7U:VH6E6wk4X58vUY6cEFw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource cbbd0be54741a7a7d9531fa364af82444808f8c54c3ed8358bbc22061effb75b
Files
-
cbbd0be54741a7a7d9531fa364af82444808f8c54c3ed8358bbc22061effb75b.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dpxwbcnx Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sjsjxlwi Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE