Static task
static1
Behavioral task
behavioral1
Sample
cbfc04753f38cb0c9ae00bd77be79c53d62896b0277f3d4689b1db9d892a1e6e.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral2
Sample
cbfc04753f38cb0c9ae00bd77be79c53d62896b0277f3d4689b1db9d892a1e6e.exe
Resource
win11-20240729-en
General
-
Target
cbfc04753f38cb0c9ae00bd77be79c53d62896b0277f3d4689b1db9d892a1e6e
-
Size
1.8MB
-
MD5
9e7d6f8b3129588d525504e17e835de0
-
SHA1
c7527effb6a25ff7945a7aeb7780f988a465d7ed
-
SHA256
cbfc04753f38cb0c9ae00bd77be79c53d62896b0277f3d4689b1db9d892a1e6e
-
SHA512
65d2db8f5f3ef8a5c569e8512fe6ec68dac509d74aae7edb8445619e14d51c51a79fd8ecae7328b7d0c1bf63d5cb75f7704c26e6ac7c78e080aa59f8057334f8
-
SSDEEP
49152:n2NpLG96sFbysfaiQTgx/fErmGYEF882y30A9ZzBJ2c:nSC96SysfauoYCDZ3dfzBYc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbfc04753f38cb0c9ae00bd77be79c53d62896b0277f3d4689b1db9d892a1e6e
Files
-
cbfc04753f38cb0c9ae00bd77be79c53d62896b0277f3d4689b1db9d892a1e6e.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aavrtusl Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kafkxdhq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE