Static task
static1
Behavioral task
behavioral1
Sample
ca03d67196d8fe511c02be0187cd693e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca03d67196d8fe511c02be0187cd693e.exe
Resource
win10v2004-20240226-en
General
-
Target
ca03d67196d8fe511c02be0187cd693e
-
Size
44KB
-
MD5
ca03d67196d8fe511c02be0187cd693e
-
SHA1
ee28828f4eca371dce0fdc41d71c3fb0f529da2c
-
SHA256
5cbb9134c773dcddcdf41efac182f13aa80b3015c4e3a6f638164efb22319253
-
SHA512
b680f095db0713bb88247f03127f8d5665c115ef3d2f9e528581d3f47705d6fef5f4157f37a1efb1749a9490c39de6aaabe72ac8697ea06a9c668a29ad2d1371
-
SSDEEP
768:TPNiwGL7pmTomWIJ2Vv4YMypC+mv2BpC6CMmECT9+xiZ39Ht:TN7o4JOwYsh2vjmZx+xU3Rt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca03d67196d8fe511c02be0187cd693e
Files
-
ca03d67196d8fe511c02be0187cd693e.exe windows:5 windows x86 arch:x86
7aade6f92d080b85959e7a904c6d487a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ExitWindowsEx
GetCursorPos
kernel32
GlobalLock
Sections
.stqp Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zwp Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ehepej Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ