Static task
static1
Behavioral task
behavioral1
Sample
cafd5c5205c27ba908b67bf86e7dab1471dd0b1d0af6947a082d960616ba73a9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
cafd5c5205c27ba908b67bf86e7dab1471dd0b1d0af6947a082d960616ba73a9.exe
Resource
win10v2004-20230915-en
General
-
Target
cafd5c5205c27ba908b67bf86e7dab1471dd0b1d0af6947a082d960616ba73a9
-
Size
1.1MB
-
MD5
1b38cec88b21b3036f11fb6431cf520d
-
SHA1
d9d27cd7c8c0f8a53a6d60f4adbdf3b7a6490d89
-
SHA256
cafd5c5205c27ba908b67bf86e7dab1471dd0b1d0af6947a082d960616ba73a9
-
SHA512
97c9ae063ab57f86228ce8eb844e6e432f4476bc8d1f3f0077f6aa6f0c5a590a87899f51fef283fb613eb0aebdf16d1df28373c020c836355e0b16d6ad85a807
-
SSDEEP
12288:yDSUtbgRlBVxUWuqrXzSn5qpUN6wzIuAVsGCpW1dBqBjzmuqwhfhonBa8:yQbBVxhFrXzSn5cnsMVn7RqJzPf+Q8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cafd5c5205c27ba908b67bf86e7dab1471dd0b1d0af6947a082d960616ba73a9
Files
-
cafd5c5205c27ba908b67bf86e7dab1471dd0b1d0af6947a082d960616ba73a9.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 912KB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 524KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ