Static task
static1
Behavioral task
behavioral1
Sample
ca2e4d344b20b0ea0ef04fbfc8e8e0327bc551e127ba51b4e80445b298102027.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ca2e4d344b20b0ea0ef04fbfc8e8e0327bc551e127ba51b4e80445b298102027.exe
Resource
win10v2004-20230915-en
General
-
Target
ca2e4d344b20b0ea0ef04fbfc8e8e0327bc551e127ba51b4e80445b298102027
-
Size
4.2MB
-
MD5
1e7bc21a10b4dadcfa48f64ed367da6c
-
SHA1
e127b26707951fcf177ff690976ea3b0d6eb879a
-
SHA256
ca2e4d344b20b0ea0ef04fbfc8e8e0327bc551e127ba51b4e80445b298102027
-
SHA512
79a82eebe06b1cf247e9727fbd4499e4a87f7a46689353ecf1b8dc3e28f55e6cf1f2c75b78f8fe5d78bfcbcdee1c807afd7d93a242583a5ac1280a7d92ccd389
-
SSDEEP
98304:RcZC0w5xVpCBtxJltono7qa0VlhylpYm/h:QC1XCBtXltoCj0VfIiWh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca2e4d344b20b0ea0ef04fbfc8e8e0327bc551e127ba51b4e80445b298102027
Files
-
ca2e4d344b20b0ea0ef04fbfc8e8e0327bc551e127ba51b4e80445b298102027.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.6MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 48KB - Virtual size: 48KB
IMAGE_SCN_MEM_READ