Behavioral task
behavioral1
Sample
ca8d9394c8ac9ec255cee6055bcae25e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca8d9394c8ac9ec255cee6055bcae25e.exe
Resource
win10v2004-20240226-en
General
-
Target
ca8d9394c8ac9ec255cee6055bcae25e
-
Size
133KB
-
MD5
ca8d9394c8ac9ec255cee6055bcae25e
-
SHA1
2f5db4215ccb6f7d24e46c814a229e942686d261
-
SHA256
2d0b76e7b0d4a8ed2b699a5ad4d36fe4a83ccea1e5d2e4e117065f8516fd29eb
-
SHA512
2095c450d47cea80625fc977111e2b6ad8f3de3113456f4b1450bb46fba7d5921a3054f86b40fedd6ab5c7d177e0c89316d41f708b19d4b4ba12250d13a76865
-
SSDEEP
3072:G4aCT+EPuwpuYwkDGZl4JaU/nV6Di4MC1O5uWdxQ:5aCSEPuY5TJaDDs0ExQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca8d9394c8ac9ec255cee6055bcae25e
Files
-
ca8d9394c8ac9ec255cee6055bcae25e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE