Static task
static1
Behavioral task
behavioral1
Sample
cdb481ec872dc687550f894401b3de2d39148b4d91905617c867acf9ad289ad4.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cdb481ec872dc687550f894401b3de2d39148b4d91905617c867acf9ad289ad4.exe
Resource
win10v2004-20240802-en
General
-
Target
cdb481ec872dc687550f894401b3de2d39148b4d91905617c867acf9ad289ad4
-
Size
110KB
-
MD5
cc45dce105ffabc975d1c7cb69820d62
-
SHA1
c6bba344c841e873c81cd5a63dd827061af00f02
-
SHA256
cdb481ec872dc687550f894401b3de2d39148b4d91905617c867acf9ad289ad4
-
SHA512
8595d870d944ec69603e37477641c84d49884db9b07a4ccbc8e2972994491822f5313ce565736f32c188ade5bed632c2be377fe9e69d1d684a426cfaa0e3abb9
-
SSDEEP
3072:4pAtAoaotMCeT0c4EX9Gjd054aI3k6b+fmJ:QAHtMffosDI3k6OmJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdb481ec872dc687550f894401b3de2d39148b4d91905617c867acf9ad289ad4
Files
-
cdb481ec872dc687550f894401b3de2d39148b4d91905617c867acf9ad289ad4.exe windows:5 windows x86 arch:x86
a81ef2136d9eead9d5e6319e357a625c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CheckMenuItem
DestroyMenu
SetWindowTextA
DispatchMessageA
GetInputState
CreateMenu
GetMenuItemCount
EndPaint
PeekMessageA
GetCursorPos
GetCursor
DeleteMenu
BeginPaint
LoadIconA
LoadCursorA
RegisterClassExA
GetWindowLongA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
gdi32
GetStockObject
CreateSolidBrush
MoveToEx
DeleteObject
ole32
RevokeDragDrop
ProgIDFromCLSID
OleIsCurrentClipboard
CoGetCallerTID
StringFromCLSID
CoInitialize
CoTestCancel
CreateILockBytesOnHGlobal
oleaut32
CreateErrorInfo
comctl32
GetMUILanguage
kernel32
GlobalFree
GetModuleHandleA
GetSystemInfo
FreeLibrary
GlobalAlloc
LoadLibraryA
GetLocalTime
GetLastError
GetCPInfo
HeapAlloc
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentStrings
InitializeCriticalSection
Sections
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
trmmjer Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE