Behavioral task
behavioral1
Sample
ca60b7ffd44ceee84f2282e6ccc2d9cf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca60b7ffd44ceee84f2282e6ccc2d9cf.exe
Resource
win10v2004-20240226-en
General
-
Target
ca60b7ffd44ceee84f2282e6ccc2d9cf
-
Size
150KB
-
MD5
ca60b7ffd44ceee84f2282e6ccc2d9cf
-
SHA1
0b4caad8333f032a61f4be6500340425fd9f0a02
-
SHA256
c0f4a30b66853a61a56b45a836942484dbbcdc31ddddad0b77be90dce254f138
-
SHA512
2792dbade182b1fd4d0d5eddc33a88c9aebde138a6ddf24a584d75cb8140160c73fb8bdcd27f1e9e54555c0f412115ffb801963779f3b71171f06c8ade550f73
-
SSDEEP
3072:/BaUtJKKF1e0bVJGksG/oY+3Yc4jOm5kx+WVYnS4NnKG8dehSc2L9E/QT:/goF1e0bVJWG/oY+3QO3xQS4NnKG8deA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca60b7ffd44ceee84f2282e6ccc2d9cf
Files
-
ca60b7ffd44ceee84f2282e6ccc2d9cf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE