Static task
static1
Behavioral task
behavioral1
Sample
ca04007fa4bd50d14bbc024c2f345deaef3c785597ebc7a0f2e3f7fb5f91214e.exe
Resource
win7-20240221-en
General
-
Target
ca04007fa4bd50d14bbc024c2f345deaef3c785597ebc7a0f2e3f7fb5f91214e
-
Size
64KB
-
MD5
80c3edfdce0d7161fa1790d412339b0a
-
SHA1
3f6862e3fd28310fcb869fc5244ddfa10e32c418
-
SHA256
ca04007fa4bd50d14bbc024c2f345deaef3c785597ebc7a0f2e3f7fb5f91214e
-
SHA512
bdf753cecc3ff396e9c8c034123afb370f414b1bbf27e4544e8047d88067c1cb0c7207cb45b39121108c0d5aa4a327583d9ac671cd2bababfac103a4552e4204
-
SSDEEP
1536:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdQouZx/Z:K0GAqjuVZ6rNOFubZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca04007fa4bd50d14bbc024c2f345deaef3c785597ebc7a0f2e3f7fb5f91214e
Files
-
ca04007fa4bd50d14bbc024c2f345deaef3c785597ebc7a0f2e3f7fb5f91214e.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
HSUDHUHW Size: - Virtual size: 148KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HSUDHUHW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE