Static task
static1
Behavioral task
behavioral1
Sample
cb9e7782bc00b5e359e20bb42d798f052e6cca76b77c36c2fc8acde7e93b8d6b.exe
Resource
win7-20240903-en
General
-
Target
cb9e7782bc00b5e359e20bb42d798f052e6cca76b77c36c2fc8acde7e93b8d6b.exe
-
Size
4.3MB
-
MD5
0ef0fc7db1f5c0fee6d9c602c6c2b776
-
SHA1
a845c9a05545dc0cfc42c2e1316e0bd535240265
-
SHA256
cb9e7782bc00b5e359e20bb42d798f052e6cca76b77c36c2fc8acde7e93b8d6b
-
SHA512
a3a171b2eaee101094f3c50b9f651336a277451020ce7da1690d52a08e42cc00fb12d4ac95f4f9c41fb9736ae510c24654493427d0907df39d9b39439f8bf530
-
SSDEEP
98304:2eMTr1N8AvrRZatKDIufQwt0Z2Z3OfdgQiqaePydaqh:2bn78waUDIm1OkZeHPJq/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb9e7782bc00b5e359e20bb42d798f052e6cca76b77c36c2fc8acde7e93b8d6b.exe
Files
-
cb9e7782bc00b5e359e20bb42d798f052e6cca76b77c36c2fc8acde7e93b8d6b.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ifixssnb Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dwcfxpmy Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE