Static task
static1
Behavioral task
behavioral1
Sample
ca67c0dce1b175dc498d9d12a861c4cb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca67c0dce1b175dc498d9d12a861c4cb.exe
Resource
win10v2004-20231215-en
General
-
Target
ca67c0dce1b175dc498d9d12a861c4cb
-
Size
326KB
-
MD5
ca67c0dce1b175dc498d9d12a861c4cb
-
SHA1
8d721a8713cc360852ace18df1480b085fe21407
-
SHA256
b8492e20aed86f05b3a56ab88eac5c60d4e27240d8aa62ace4ac50fe56c646fb
-
SHA512
c7d25951258ebc76373efba41555b12404e34b3753212941c662aff932982799da7332e854b68b898fc6e90ae05ac0a33bada8d1d690c307dac65d843aab1579
-
SSDEEP
6144:3sHz7V4O1KranRtYyAdaqd1kZIY2ljgaCJGzfZwb3y:3sHr1KrOtRNqd1BFgaYGzfZW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca67c0dce1b175dc498d9d12a861c4cb
Files
-
ca67c0dce1b175dc498d9d12a861c4cb.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE