Behavioral task
behavioral1
Sample
ca210fd930a90f628bf355271e848ce8.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ca210fd930a90f628bf355271e848ce8.exe
Resource
win10v2004-20240226-en
General
-
Target
ca210fd930a90f628bf355271e848ce8
-
Size
46KB
-
MD5
ca210fd930a90f628bf355271e848ce8
-
SHA1
3e70d7f958e450600481a0f8d74249d13de247f2
-
SHA256
18fd9f23006d281baefb86d7f3d4f91b3af014479d4c953e03cad2b239978243
-
SHA512
361953b1543bc6316eeb30f63b75eaed86f6a76762395caf22fb34374549a25db52e017f0e67edeb5c3129338b89427d17b36e4eb4827a68220677d4070a2402
-
SSDEEP
768:XGpgjo8qp+honcMo1hcVSoRUmhVfKxVnb:wlpyoncFcVSoRVVSxtb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca210fd930a90f628bf355271e848ce8
Files
-
ca210fd930a90f628bf355271e848ce8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE