Static task
static1
Behavioral task
behavioral1
Sample
cb6e1f5595b852c377a54fb2e62d6be2d270ffa1f4388c45f88e48ced3456888.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cb6e1f5595b852c377a54fb2e62d6be2d270ffa1f4388c45f88e48ced3456888.exe
Resource
win10v2004-20240802-en
General
-
Target
cb6e1f5595b852c377a54fb2e62d6be2d270ffa1f4388c45f88e48ced3456888.exe
-
Size
322KB
-
MD5
9cb1756afd35b77acc762f550857e271
-
SHA1
589ac47882c0c0c9d6c52fc2bc32bc946cf7ae7b
-
SHA256
cb6e1f5595b852c377a54fb2e62d6be2d270ffa1f4388c45f88e48ced3456888
-
SHA512
0b54478ee7944362a9af3d3f11fdb204d3b649bac50ad5c7c02ee953176c07cae4648f04481b412dd52a0f40609ffaa7c5fbb9249e9698832b72615ac7012855
-
SSDEEP
3072:MLfreEDq0IVljprQbsvfDHdODvf4+W0B1zQQBBCcFaRkilrG5oOx8pljfrMSsUP6:MLTXDq0IXaIDs7Nj52kcO23oUCjr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb6e1f5595b852c377a54fb2e62d6be2d270ffa1f4388c45f88e48ced3456888.exe
Files
-
cb6e1f5595b852c377a54fb2e62d6be2d270ffa1f4388c45f88e48ced3456888.exe.exe windows:5 windows x86 arch:x86
5e541f0ed19da8c67474afeab35f1a51
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasesLengthW
GetNumaProcessorNode
GetConsoleAliasExesLengthA
WaitForSingleObject
InterlockedCompareExchange
FreeEnvironmentStringsA
GetModuleHandleW
ReadConsoleW
FormatMessageA
SetCommState
GetEnvironmentStrings
GetVolumeInformationA
FatalAppExitW
CopyFileW
GetSystemTimeAdjustment
WriteConsoleOutputA
HeapDestroy
GetFileAttributesA
SetConsoleMode
GetBinaryTypeA
GetStdHandle
SetPriorityClass
GetProcAddress
GetLongPathNameA
BuildCommDCBW
LoadLibraryA
LocalAlloc
MoveFileA
QueryDosDeviceW
CreatePipe
GetModuleFileNameA
GetDefaultCommConfigA
GetModuleHandleA
GetCommTimeouts
FreeEnvironmentStringsW
WriteConsoleOutputAttribute
FindAtomW
CreateFileA
SetStdHandle
GetLastError
GetComputerNameA
HeapFree
HeapAlloc
Sleep
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
CloseHandle
user32
GetFocus
advapi32
ObjectPrivilegeAuditAlarmA
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.powe Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wera Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ