Behavioral task
behavioral1
Sample
ca72b53a58162bd3accfedd66a6244d9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca72b53a58162bd3accfedd66a6244d9.exe
Resource
win10v2004-20240226-en
General
-
Target
ca72b53a58162bd3accfedd66a6244d9
-
Size
59KB
-
MD5
ca72b53a58162bd3accfedd66a6244d9
-
SHA1
7eb908fed0cfb71c803e9d2e8221eefe902281e1
-
SHA256
6acd98db56e99b6376954b795c23c7558b0ee459e07d4e862f1d832316301744
-
SHA512
3738adb94a924e6fc7bf608e822d68ce092388b807ef0f7e00cb39db4f3fa4f8258eeca382c24381680cf20edd4e1d4fa078346a4c5d16f958ec0247c4d1cd05
-
SSDEEP
768:7Zt8E7BH1ARdf1MFaozQ/cinww4xhkiOtje0KJ/ls33dnN0G+ZXu54t7KVIoq3+v:Vt8EIk5yiwe0oG3tnngWtw3+IRvp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca72b53a58162bd3accfedd66a6244d9
Files
-
ca72b53a58162bd3accfedd66a6244d9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE