Static task
static1
Behavioral task
behavioral1
Sample
ca83d969a8fe141f92a109ee01dfdb78.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca83d969a8fe141f92a109ee01dfdb78.exe
Resource
win10v2004-20240226-en
General
-
Target
ca83d969a8fe141f92a109ee01dfdb78
-
Size
162KB
-
MD5
ca83d969a8fe141f92a109ee01dfdb78
-
SHA1
9b596a68a610be97d715b89a2a3d1f5a30346e97
-
SHA256
b4620ac5d996a1620ee8cf3ad9256a47138e9143e9686c3840f69afb5b4bb20f
-
SHA512
0598ce8cad58ec8c6a500cbde4bb9feb6484543034c8fed83d61161d0cb488b76bbdb8269e27b96ce945c6b7be187bb6d5da3105f572a4bc104d3e2b53c49151
-
SSDEEP
3072:qRrgLBWT2rfahTYFvOFKbWQyz7QfsPt7JeNzrv3/B5N7S2J/2Zrdmm:1ATYahTY62WQDfsPt7w33/d9oZn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca83d969a8fe141f92a109ee01dfdb78
Files
-
ca83d969a8fe141f92a109ee01dfdb78.exe windows:4 windows x86 arch:x86
7ff4c0bf321014ece3e5e94e7edae5b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FreeLibrary
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetProcAddress
Sections
.text Size: 161KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE