Static task
static1
Behavioral task
behavioral1
Sample
cfbe35e5f3f0e71ef9250b45bd1b025d82c3ced7bf7d0e654b87b4b281b8da24.exe
Resource
win7-20240221-en
General
-
Target
cfbe35e5f3f0e71ef9250b45bd1b025d82c3ced7bf7d0e654b87b4b281b8da24
-
Size
712KB
-
MD5
565f829f1c571b96fc7346e85074e0d9
-
SHA1
e22884836b742a1b5ed7d7a27e1707cf986dbd88
-
SHA256
cfbe35e5f3f0e71ef9250b45bd1b025d82c3ced7bf7d0e654b87b4b281b8da24
-
SHA512
53e5e7d6a306b646ac452932513e263f43505f63f60741c79140a1a0c8947fbfcdf454575b1c0a8c184dfa696ce2a7ca601c5d192c23470a92a8a1bd73e1965b
-
SSDEEP
12288:SX0pxjV36Di8BtLLxmIQYlV1Za/kInP3ukPEMDR+8h2ihWzfA51ZfKyHZRs0iNcm:xBFKlxmIZ1yPJEGR+CRWzfA3ZftRl/HG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfbe35e5f3f0e71ef9250b45bd1b025d82c3ced7bf7d0e654b87b4b281b8da24
Files
-
cfbe35e5f3f0e71ef9250b45bd1b025d82c3ced7bf7d0e654b87b4b281b8da24.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 700KB - Virtual size: 698KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ