Static task
static1
Behavioral task
behavioral1
Sample
ca3040a40850c986cb8461a90f6b43bcffa783d9cc0446d4641a7c95d47258fa.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ca3040a40850c986cb8461a90f6b43bcffa783d9cc0446d4641a7c95d47258fa.exe
Resource
win10-20231020-en
General
-
Target
ca3040a40850c986cb8461a90f6b43bcffa783d9cc0446d4641a7c95d47258fa
-
Size
12.5MB
-
MD5
7a83167fd648f71e806260a09a3fa19c
-
SHA1
1edc7d96b0b128ddb3f897546f22c0d0bb2902b1
-
SHA256
ca3040a40850c986cb8461a90f6b43bcffa783d9cc0446d4641a7c95d47258fa
-
SHA512
5abde7d0fb3b21313286d5fb7fa6af7602988128905d73e375fa8d0b8deea54220bb244ba96dac83373b689118d5c90b6d9897ba63477f9bf51d30c8b76dd641
-
SSDEEP
196608:cHonNsG9E4shzrNgRSJhDBxLK4IH6vV+r8Fuq/tjV4VIyRXeH5S+r6:ce71shzrISX1FV+rS3n8eC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca3040a40850c986cb8461a90f6b43bcffa783d9cc0446d4641a7c95d47258fa
Files
-
ca3040a40850c986cb8461a90f6b43bcffa783d9cc0446d4641a7c95d47258fa.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12.5MB - Virtual size: 12.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ