Behavioral task
behavioral1
Sample
caca6f894d1ce54003ef1cf905e7e70a.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
caca6f894d1ce54003ef1cf905e7e70a.exe
Resource
win10v2004-20240226-en
General
-
Target
caca6f894d1ce54003ef1cf905e7e70a
-
Size
2.9MB
-
MD5
caca6f894d1ce54003ef1cf905e7e70a
-
SHA1
efe4a098229e7bc31ac1f62000ef707cee1eb961
-
SHA256
5f75d20683741d06281496fe1394b4c2e360b8fc6858b67022fa84d54bcba0fd
-
SHA512
04c72f7677e08a756d20e9aa7c64e1ed22d8783f709c12da2c8f74279a2e035f17e25364cdf90d1f9a3e07ee330b37df8a241bde3f80ef29824102c4ffc22984
-
SSDEEP
49152:9d9Mzqm7s5AOJZxW5zDsuNFn5vxE9P4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:9dGem90ZxozDsuNP+9gg3gnl/IVUs1jl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource caca6f894d1ce54003ef1cf905e7e70a
Files
-
caca6f894d1ce54003ef1cf905e7e70a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE