Behavioral task
behavioral1
Sample
ca780269f69b3c6b1018e4044990b58d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ca780269f69b3c6b1018e4044990b58d.exe
Resource
win10v2004-20231215-en
General
-
Target
ca780269f69b3c6b1018e4044990b58d
-
Size
3.0MB
-
MD5
ca780269f69b3c6b1018e4044990b58d
-
SHA1
0f467722b754b9d45a1e29323cb2b062af2bc540
-
SHA256
0bf73626943ab9eebfe634131f028694b5392018ac36386f3784968be54e816a
-
SHA512
8554ea3fd184b947e2df218e3ab7e27b6eabeb583ef4db9ea44fe71d68b2c21526e73aabb771fd4a4f0757100dedda84f506ff7f7030857a4976e8008c39a2d7
-
SSDEEP
49152:Is8RFd9s1eddcakLxi71kiJacakLKSQgGiiA8tSjOuk0cakLxi71kiJacakLj:IvRFd9s1eddcak9i7GiJacakWSQgGZTc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca780269f69b3c6b1018e4044990b58d
Files
-
ca780269f69b3c6b1018e4044990b58d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE