Behavioral task
behavioral1
Sample
ca14a7b30f82b1e04087c9b6af5c33bd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca14a7b30f82b1e04087c9b6af5c33bd.exe
Resource
win10v2004-20240226-en
General
-
Target
ca14a7b30f82b1e04087c9b6af5c33bd
-
Size
250KB
-
MD5
ca14a7b30f82b1e04087c9b6af5c33bd
-
SHA1
f4dbf16a6480c0f881335e56953d26410c51ec99
-
SHA256
e940515fbc4e26072b8bf384342df8c4442a250fac22f94aa881002b62b1b2c4
-
SHA512
012c4fe053dc7370b7787de7721e98a0fdcc0b3a62057d3105a9968151d6aaf3d3a9d9a3c295d15ca8835e66009e5bac3b6f82f947435cd7e16dc8281f739511
-
SSDEEP
6144:OhieuJDr5T8b2ufqBLjSB/MS7irtIa6cwoD8ZroSfjGFA:beKrJJuf86AYcwoaoSbr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca14a7b30f82b1e04087c9b6af5c33bd
Files
-
ca14a7b30f82b1e04087c9b6af5c33bd.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 456KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE