Static task
static1
Behavioral task
behavioral1
Sample
cf22cbe67dcbfd9875c273a58dcd5d5045c2eb35c189f3c6f9868d8f40c16c5d.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
cf22cbe67dcbfd9875c273a58dcd5d5045c2eb35c189f3c6f9868d8f40c16c5d.exe
Resource
win10v2004-20240508-en
General
-
Target
cf22cbe67dcbfd9875c273a58dcd5d5045c2eb35c189f3c6f9868d8f40c16c5d.exe
-
Size
1.9MB
-
MD5
8ee7c697d890f0183961eadd86bbac7b
-
SHA1
b28f358cced2872ac528ed3d1fd82103b2089b5a
-
SHA256
cf22cbe67dcbfd9875c273a58dcd5d5045c2eb35c189f3c6f9868d8f40c16c5d
-
SHA512
028c8d98555b78020c77f8dd0fece9073ae587663ef76d36d9af109a81aa02a1289b9254d1400eafc5ea8bb13e2b244d81a8b749cf9b37a0ffe97dc16fc40ee2
-
SSDEEP
12288:tk9l+pL56jXa+cLhZDgF7GqFGUP7bkli/wvpVtwjJUe3P0wMudMCBKM/y9KQ:TZ56oLTDgF7DGUzbkgwvjynOjCj/yH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf22cbe67dcbfd9875c273a58dcd5d5045c2eb35c189f3c6f9868d8f40c16c5d.exe
Files
-
cf22cbe67dcbfd9875c273a58dcd5d5045c2eb35c189f3c6f9868d8f40c16c5d.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ