Static task
static1
Behavioral task
behavioral1
Sample
ca79f1a72300e5f678cc9d79c749c9ed.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca79f1a72300e5f678cc9d79c749c9ed.exe
Resource
win10v2004-20240226-en
General
-
Target
ca79f1a72300e5f678cc9d79c749c9ed
-
Size
252KB
-
MD5
ca79f1a72300e5f678cc9d79c749c9ed
-
SHA1
fa716f8a89329186a988825b65aebaff64fc3688
-
SHA256
60e6f4ba7eac9971e2c5d428505dbd7e538be03449aae7783533883c8c07717d
-
SHA512
1f0340151be97907a89cc10f4c9ecbd42a3d9bd8414020351e03e6830a11fea3aaf81b79a3c4f78cef70a503c70aa74d47eb4a621c4c8e57e2ca8a21678fb54b
-
SSDEEP
6144:cz7Q1tVC/Ud1D+8fKx/8GcsMBvMCmJp4JtxDLmWp4sS:87Q1ts/E+8+esTCmIV4s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca79f1a72300e5f678cc9d79c749c9ed
Files
-
ca79f1a72300e5f678cc9d79c749c9ed.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 63KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE