Behavioral task
behavioral1
Sample
ca5183e0a2ca95d2cc5134f4101f79d0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca5183e0a2ca95d2cc5134f4101f79d0.exe
Resource
win10v2004-20240226-en
General
-
Target
ca5183e0a2ca95d2cc5134f4101f79d0
-
Size
5.5MB
-
MD5
ca5183e0a2ca95d2cc5134f4101f79d0
-
SHA1
2144b911b9085199da6fbdcf8fdb1e79f1d9744a
-
SHA256
a1e2f1569b5b0bad11ee0379666a65882265cadf9c137432f923f6c6c710181f
-
SHA512
51f09c1aaabe0aca881b69d4075668ddbb11c365f39e8815938ab9eab0fffcbff8adff214e2059eb09da0d731138650cf0c7ec652a30dd447b4b385c161fcf3f
-
SSDEEP
49152:Q2GJDRehjA2Sxzq1h9Vqb0YQNBTeyhEQB5ar/Zqaay3vRmCFOGNj8mW4JH53R+wq:QxkA2K34vB5Q35mCckFR+vicS43
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca5183e0a2ca95d2cc5134f4101f79d0
Files
-
ca5183e0a2ca95d2cc5134f4101f79d0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE