Static task
static1
Behavioral task
behavioral1
Sample
ca9a286c8b46c316804f1ee2266777c1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca9a286c8b46c316804f1ee2266777c1.exe
Resource
win10v2004-20240226-en
General
-
Target
ca9a286c8b46c316804f1ee2266777c1
-
Size
128KB
-
MD5
ca9a286c8b46c316804f1ee2266777c1
-
SHA1
3f5f239f0bc34685616dcb5d9bcf24196663cff8
-
SHA256
f5ae38140b10b70a7a4f8900858d91e5f8936fc990483e1443bbdd495fd8ccdf
-
SHA512
7b85784469c7b54c83db931167673ccf76720228570584bfbab8736909504ff0cfd5ddaf36b518e3b2b7054862ce9e15d23973d2388d383d76a67412bae975df
-
SSDEEP
3072:oFUTOgM+xqMFdxyK0hGo3hoBTobshWJtDK:lZMSFnyK0hG2hShstm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca9a286c8b46c316804f1ee2266777c1
Files
-
ca9a286c8b46c316804f1ee2266777c1.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 275KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE