Static task
static1
Behavioral task
behavioral1
Sample
ca3e32d17d70ecc315f31768be01ca94.exe
Resource
win7-20240221-en
General
-
Target
ca3e32d17d70ecc315f31768be01ca94
-
Size
408KB
-
MD5
ca3e32d17d70ecc315f31768be01ca94
-
SHA1
bab6f06bf2066f3b0f52ed9c22f16bc0ff33d537
-
SHA256
ecd0a5666f8ad15103e0725e7ab122f9abddf6f9d83b40eb95c3424fd670725f
-
SHA512
5eddb231b10cfd55a0011a88654374828fa9034cc41e07cca712d48453ae85cfef82b6fb5aefb59e38843704d26a5c0c68d363c755ee78d1dad16a9b0e497d9d
-
SSDEEP
12288:0Oeq2c30SopOtyDSzkcsTLP3cbL2LPMf5:4q2HOMD+gLEMA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca3e32d17d70ecc315f31768be01ca94
Files
-
ca3e32d17d70ecc315f31768be01ca94.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 378KB - Virtual size: 383KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE