Static task
static1
Behavioral task
behavioral1
Sample
ca383363117e52097f8f318c22e4f15b.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ca383363117e52097f8f318c22e4f15b.exe
Resource
win10v2004-20240226-en
General
-
Target
ca383363117e52097f8f318c22e4f15b
-
Size
1.6MB
-
MD5
ca383363117e52097f8f318c22e4f15b
-
SHA1
b5cb549930e66f7a84691084f5ef9dcc2fd3368f
-
SHA256
6470c19cdb94cb189cbc780f313071d55019cbc75409a9fb2d8d6e101100d165
-
SHA512
99d27987ca3f5119c1ad947827bb0252c655aad7a9a669cc27fbd3c753a17b63bc892b431e46f91d49dbcd6c45b69db1509113391f4933e29e200afb3a55ef43
-
SSDEEP
24576:/nb7xLpoVLncEkmaswLHDt0oGWBdqwCpwB0vj7IgOuakj8W+rxGi5s7DeMccUEXF:/vxuqEB5jcRKOFrl5ueMcNkE7M5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca383363117e52097f8f318c22e4f15b
Files
-
ca383363117e52097f8f318c22e4f15b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
services Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE