Behavioral task
behavioral1
Sample
ca3a4810ec0a6f758b2b057b4e028401.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ca3a4810ec0a6f758b2b057b4e028401.exe
Resource
win10v2004-20240226-en
General
-
Target
ca3a4810ec0a6f758b2b057b4e028401
-
Size
1.3MB
-
MD5
ca3a4810ec0a6f758b2b057b4e028401
-
SHA1
c34eaa1f3830b6c4fcc4a5adb84ee7d065c831bc
-
SHA256
d6744cb4b53ec723ae6996afdf3cf4baac627aa8c95b971fd02d896649da12a9
-
SHA512
d7e37613358f747c3b231ce0698c9732221acc417c40b99a523d28046117bb05e73cfcb7342ff5f825027dcfd4692c4851fa4b4de964ca3ff933d94662a92e1d
-
SSDEEP
24576:PWU4RuuwZAY2coELNXUAe8DUJhgOrfEwCiBTptrYd9BGvG:P4Iu/lcoAXPUoiJCi1T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca3a4810ec0a6f758b2b057b4e028401
Files
-
ca3a4810ec0a6f758b2b057b4e028401.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE