Static task
static1
Behavioral task
behavioral1
Sample
cb34cf4232a7c1f794d37d369c5c0700N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cb34cf4232a7c1f794d37d369c5c0700N.exe
Resource
win10v2004-20240802-en
General
-
Target
cb34cf4232a7c1f794d37d369c5c0700N.exe
-
Size
361KB
-
MD5
cb34cf4232a7c1f794d37d369c5c0700
-
SHA1
0a3b2a5dcf6d15e40df8be68283d2796b9fe98b9
-
SHA256
0beae52858a6ad7cc4ecaf738fbf5b640e0440c7899b92756f7d0fc35282db8f
-
SHA512
eb306b5d4e9fbf7d9ef67b6c21022dedce0970b38861fbf18572a3a2b1dcb75864cd0305c6a33f5613b2e4b5b2a28f5513ae78ea8bfb1e4203d54d5ac504e61c
-
SSDEEP
6144:Ykg8ls29XXc3h/3wa7wur0CNG7OD68w+nVW5GJZ2tNYLj8Mfs7BKrHK:Jg5+Xgh/Psur0yGSD68w2VzYKj86s7Bx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb34cf4232a7c1f794d37d369c5c0700N.exe
Files
-
cb34cf4232a7c1f794d37d369c5c0700N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 159KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 146KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE