Static task
static1
Behavioral task
behavioral1
Sample
ca470d2234fbbca33bc0d26a885497f2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca470d2234fbbca33bc0d26a885497f2.exe
Resource
win10v2004-20240226-en
General
-
Target
ca470d2234fbbca33bc0d26a885497f2
-
Size
111KB
-
MD5
ca470d2234fbbca33bc0d26a885497f2
-
SHA1
1b94cac4c3a3a8cb29e407fb6f09cf178879bdae
-
SHA256
4b63cedb643bb3a54cf5224454d5ef9bef0ab1787aecd839516375f15213aa4c
-
SHA512
3aed320290215e87b2090fd80946cad14f8dbaed18b1a1e209441903480c5e8bd98a55614ec996c729f8dda326d179b4062b726055dc9ade1591482d484b0f46
-
SSDEEP
3072:lHJIG67mXz3AOZDd4LbLNBJ16U5R1L/2HI/KG8Q1nLdIor3:L07a3AgDd46U5R5eAKG8Cx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca470d2234fbbca33bc0d26a885497f2
Files
-
ca470d2234fbbca33bc0d26a885497f2.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 111KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE