Static task
static1
Behavioral task
behavioral1
Sample
ca46e263b51b0860da86f1720d41380a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ca46e263b51b0860da86f1720d41380a.exe
Resource
win10v2004-20240226-en
General
-
Target
ca46e263b51b0860da86f1720d41380a
-
Size
1008KB
-
MD5
ca46e263b51b0860da86f1720d41380a
-
SHA1
f44706e425fa8b000d11221ff56759e4f1865c3c
-
SHA256
8e2b9eac356b0204ecf8401305e7ed63b1a2f6574b8d067b87602406f4036121
-
SHA512
04c155897e11ec4b318c69db5481679502c80081f73e5a697d69fa95de54e08f4cb15bfddf014d17e063ae363e9997bbe0d98fbf683533ccbdb1f56927d04efb
-
SSDEEP
24576:mb7wrZsVjdMQ/NtBidjRrQVmG10/rmG10/i3I3IkD:mbmyVH/UdQVmGormGoiYnD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca46e263b51b0860da86f1720d41380a
Files
-
ca46e263b51b0860da86f1720d41380a.exe windows:5 windows x86 arch:x86
810072fa74d5de35da48ab11aafc3782
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 kernel32
LoadLibraryA V"
Sections
.text Size: 108KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 568KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ