Behavioral task
behavioral1
Sample
ca303129278e9d2c9607100d3a640c58.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ca303129278e9d2c9607100d3a640c58.exe
Resource
win10v2004-20240226-en
General
-
Target
ca303129278e9d2c9607100d3a640c58
-
Size
1.8MB
-
MD5
ca303129278e9d2c9607100d3a640c58
-
SHA1
0b9c0c88fc9129dc679ec3b3a3c30a0bb9487b18
-
SHA256
647bc0c35481d6efed617790276e718443372fbaf2f225e0f94cac94c7a4eb28
-
SHA512
80767bb2af81e0175b20895e3d1a70b69b4ae35df3a506e20f679034955dbb6c99e9f3aa64cdfc04d50bcccc3f0f572bbdd86d9919abcd1654b8ce610e81a922
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqZ:SCqm2Jpr0nNM7Dus7NxA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca303129278e9d2c9607100d3a640c58
Files
-
ca303129278e9d2c9607100d3a640c58.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE