Static task
static1
Behavioral task
behavioral1
Sample
ca24c99f8463d5c9a7b696bd364e7547.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
ca24c99f8463d5c9a7b696bd364e7547.exe
Resource
win10v2004-20230703-en
General
-
Target
ca24c99f8463d5c9a7b696bd364e7547
-
Size
573KB
-
MD5
ca24c99f8463d5c9a7b696bd364e7547
-
SHA1
8a8327d1e142aed235f85bfdfcb88e77f5114e54
-
SHA256
7afc79854ce3ac028b4381be85f86838578bebb5e84909e80ef48f4366482f6d
-
SHA512
f181e4dc4a9ba2c53894ef449bd8a2203abca4433f519ddbc8f1e80a127420a0b6605287af624aead6b847109b112499f98368b7e4067b4fb55d7748d93797f4
-
SSDEEP
12288:ZN1kjLCPy/vNzJX5HyrMza7QYmEtZPDh7tqly2BaPR:A/FR5HKyaEEt2Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca24c99f8463d5c9a7b696bd364e7547
Files
-
ca24c99f8463d5c9a7b696bd364e7547.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 569KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ