Static task
static1
Behavioral task
behavioral1
Sample
CFB1F534DBB8DCEFC8B796D42EA10E1D.exe
Resource
win7-20240903-en
General
-
Target
CFB1F534DBB8DCEFC8B796D42EA10E1D.exe
-
Size
255KB
-
MD5
cfb1f534dbb8dcefc8b796d42ea10e1d
-
SHA1
563eb6543abf1fab846af9350e156f6c91070cae
-
SHA256
49b88f74282203ff9472be70da1695613b5516d0531c3e7a424f9de8cdb19a0d
-
SHA512
62c04b862196af79dc567f5a2835f16b36989d98fc6404a5b59b88b199449a70516e45a961ca6c159b520cc50aafc51d5803979b4a9459dadf95178dc8c9f481
-
SSDEEP
6144:mZnw3Q94THw6lCWLfiw6x3kOMDzvx+nikv5MSDq7P5RyD0K:4w3QuzpRLS6RDzcZDeyDp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CFB1F534DBB8DCEFC8B796D42EA10E1D.exe
Files
-
CFB1F534DBB8DCEFC8B796D42EA10E1D.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ