Behavioral task
behavioral1
Sample
ca1943674ff43f657398ab620ab471a2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca1943674ff43f657398ab620ab471a2.exe
Resource
win10v2004-20240226-en
General
-
Target
ca1943674ff43f657398ab620ab471a2
-
Size
188KB
-
MD5
ca1943674ff43f657398ab620ab471a2
-
SHA1
24c28b04c3a6e1c8a8ea9ad2d3a682caa72aab52
-
SHA256
84b2a68e1196a9426d7b175ecddcaa2e18ca652cbfcd9169a68e6034206875fa
-
SHA512
24bb2495522972d1f08f814664b80aaa0ecacfa44257824b5e2f4f99d80df6c239425dfffef4e14d450b7916e571d55a5288dbbea326c774bf4525f0826c102a
-
SSDEEP
3072:nbuknPAh92OLa3+iGa+pd71ZPJ4ND2m5+E:nbrAfL8aFyND2mZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca1943674ff43f657398ab620ab471a2
Files
-
ca1943674ff43f657398ab620ab471a2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE