Static task
static1
Behavioral task
behavioral1
Sample
cb052f0f705338689859907825439468244fd332936546a93c6414e35b769369.exe
Resource
win10v2004-20240508-en
General
-
Target
cb052f0f705338689859907825439468244fd332936546a93c6414e35b769369
-
Size
2.3MB
-
MD5
4c0ac01a93ed574215607e55e31cbdcd
-
SHA1
e313d76478aae68cf5829c90feea89837c6b4185
-
SHA256
cb052f0f705338689859907825439468244fd332936546a93c6414e35b769369
-
SHA512
c13e254c0cadce21d4d4137fc2815b039fafa1f655e4511ebf47f3d094b47225682f36ab48a4f3c15e7b50b45b646a156b6c3a98effdc562b91c7902590b2a1c
-
SSDEEP
49152:wQZZewhgGT5uE5pQ8a7UvAjv7ljFWVeVVhXg0KKaRKSuwf3aoYPRA:wIY0AE5p+U4jxFtCZtAoM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb052f0f705338689859907825439468244fd332936546a93c6414e35b769369
Files
-
cb052f0f705338689859907825439468244fd332936546a93c6414e35b769369.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wgbszssg Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lmugnqrm Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE