Static task
static1
Behavioral task
behavioral1
Sample
ca2317517f0ddc801b73b436c5ccc577.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca2317517f0ddc801b73b436c5ccc577.exe
Resource
win10v2004-20240226-en
General
-
Target
ca2317517f0ddc801b73b436c5ccc577
-
Size
593KB
-
MD5
ca2317517f0ddc801b73b436c5ccc577
-
SHA1
4090c3a57eaa476db4d0a85fc9ae479527a503a6
-
SHA256
dca9ab7bbb4890c84bb0d363ed3a1f9b0be9f58a8c00cff74941a0d69ed67a41
-
SHA512
943eb00af8dfaed23731a108f1dec340bdb87b0bff1a27d8e50fdd5ab0d498ade16466ee59590ea1b27b25b7d2c9865aff330c96fe6e4b77d8fbd32adb4376a0
-
SSDEEP
12288:Netxf6xxzDczgPmbWUeNgXBF3Z4mxxNDqVTVOCpin:NuuugA04BQmXMVTzwn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca2317517f0ddc801b73b436c5ccc577
Files
-
ca2317517f0ddc801b73b436c5ccc577.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 21KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 242KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE