Static task
static1
Behavioral task
behavioral1
Sample
cd5b4ae411dec255f6b3a1444012f21ec1a76b3a1ce5e837a06267426c909b5d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd5b4ae411dec255f6b3a1444012f21ec1a76b3a1ce5e837a06267426c909b5d.exe
Resource
win10v2004-20240508-en
General
-
Target
cd5b4ae411dec255f6b3a1444012f21ec1a76b3a1ce5e837a06267426c909b5d.exe
-
Size
80KB
-
MD5
1ece3fed96e5f30387334d6304fc8219
-
SHA1
9ec4b3ea43b94f48d6624bc5721a77cbb8500841
-
SHA256
cd5b4ae411dec255f6b3a1444012f21ec1a76b3a1ce5e837a06267426c909b5d
-
SHA512
4b7f19d63ddc83c71b66b3f285d836f0f52ff46d408e19d0fc18aed843c39d82e543ee0d3c6f6e7ba9506b5b8730509ddd071c6e690f674e957deebe0d024de6
-
SSDEEP
1536:vXcxhhFpEU/lkwYBSvZrHHHHHHHaHHHH4yoEQwLgZ6rPYZrFTRJOpoXZ:vcxD/iB+ZrHHHHHHHaHHHHSeg4bYZp1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd5b4ae411dec255f6b3a1444012f21ec1a76b3a1ce5e837a06267426c909b5d.exe
Files
-
cd5b4ae411dec255f6b3a1444012f21ec1a76b3a1ce5e837a06267426c909b5d.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam02 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam03 Size: 11KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam04 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE