Static task
static1
Behavioral task
behavioral1
Sample
cfb68b6bca32272424807c3250f37b51253b102b615ce99c8c7845e8259f62dd.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
cfb68b6bca32272424807c3250f37b51253b102b615ce99c8c7845e8259f62dd.exe
Resource
win10v2004-20240611-en
General
-
Target
cfb68b6bca32272424807c3250f37b51253b102b615ce99c8c7845e8259f62dd
-
Size
3.8MB
-
MD5
1b1ab109f16738092c3071280c593005
-
SHA1
246ffc1165772cb77164aeed6ae4a2969a836318
-
SHA256
cfb68b6bca32272424807c3250f37b51253b102b615ce99c8c7845e8259f62dd
-
SHA512
3a716a952f087f6a7a27edcb20edd6b6eec23eb556e9fdfc3a2b1ef2373da8b84939a6fcc541a9106a0cf6bc131dd0a9a78e72fd8b84eacc1022f31ec691128e
-
SSDEEP
49152:IwnlrhBk5NN9oeuNhfVV1BCjBQ6pjylKEs4hVaP:Iwnl1BuNNueg9H6pjoKLWVaP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfb68b6bca32272424807c3250f37b51253b102b615ce99c8c7845e8259f62dd
Files
-
cfb68b6bca32272424807c3250f37b51253b102b615ce99c8c7845e8259f62dd.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ