Static task
static1
Behavioral task
behavioral1
Sample
7ca6b1a52aaa9fa5124b159a888fa4c2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ca6b1a52aaa9fa5124b159a888fa4c2.exe
Resource
win10v2004-20231215-en
General
-
Target
7ca6b1a52aaa9fa5124b159a888fa4c2
-
Size
136KB
-
MD5
7ca6b1a52aaa9fa5124b159a888fa4c2
-
SHA1
64987c064877c652035b21d7b72df6f2383ad0e2
-
SHA256
e359f3fc2a6abcd14855b97e36e455b2f88730a0381ad743afd2e00374ed53c2
-
SHA512
6efb6f72b0bb95284c62b9b5d37e5cad6e6277294bec7608dcb0623e7b3b23b790833f5e982ed6fca4f096db97c760afa20f144004ca290d4c1c251977e577c6
-
SSDEEP
768:8wKiOLx6L0SR282gBZVRGKV9ncS6kKVNlrjKIU:8U2x20SR72gHVRGWcS3QGI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ca6b1a52aaa9fa5124b159a888fa4c2
Files
-
7ca6b1a52aaa9fa5124b159a888fa4c2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ghlz0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ghlz1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ghlz2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE