Static task
static1
Behavioral task
behavioral1
Sample
ca340328a09ac92cb4560a3ae9b479d314c5aa1eb551e38bf138034cd41abce7.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ca340328a09ac92cb4560a3ae9b479d314c5aa1eb551e38bf138034cd41abce7.exe
Resource
win10v2004-20231127-en
General
-
Target
ca340328a09ac92cb4560a3ae9b479d314c5aa1eb551e38bf138034cd41abce7.exe
-
Size
1007KB
-
MD5
81e322ffa4f08ef1ce49fc1401f523d6
-
SHA1
aff846fdab534596a2b79d7d4b37813e25b9055f
-
SHA256
ca340328a09ac92cb4560a3ae9b479d314c5aa1eb551e38bf138034cd41abce7
-
SHA512
529f6be71dac266ad62149434591e58892df222c822151bd1afd99d4fd27cc7f51f7b71b340a2408ac63029accf63d4b550167bbbb4d941df267750aed792507
-
SSDEEP
12288:Kr9NAc2ZJGgcAGBUS/3OCvY43AZ8LjY4D4DLi/aDgOdcGrZdD:K/MG+Y3ZvRAyLjY4D4DLcGrZdD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ca340328a09ac92cb4560a3ae9b479d314c5aa1eb551e38bf138034cd41abce7.exe
Files
-
ca340328a09ac92cb4560a3ae9b479d314c5aa1eb551e38bf138034cd41abce7.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 963KB - Virtual size: 963KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ