Static task
static1
Behavioral task
behavioral1
Sample
cad80dd8d90d91f2174b52097b69c53c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cad80dd8d90d91f2174b52097b69c53c.exe
Resource
win10v2004-20240226-en
General
-
Target
cad80dd8d90d91f2174b52097b69c53c
-
Size
680KB
-
MD5
cad80dd8d90d91f2174b52097b69c53c
-
SHA1
818b765d011f57fc9b761c9402e10d2ceeb3fc47
-
SHA256
2e8ea7f7cfa8098757a263f9a1c3e6d85d2862f6c943363a6ea09b9f2ac9da47
-
SHA512
a0b2ff9f0bfbc58e9fac9b6bcdf0d3e80a84162afe5b3efd25d525501dc4b849af7bbaa9e6933a1d66f11ba82b1c2eda03a6cf93774dec186f86ddcad8780092
-
SSDEEP
12288:O1ex3kvOHx3AxO/dBdi/IPLEdFDr1xMXtP8bG59Dqg8ptXB+1tj9TZYhP:g0gOBN2QPLEdZhxM9PvIfc1tjkh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cad80dd8d90d91f2174b52097b69c53c
Files
-
cad80dd8d90d91f2174b52097b69c53c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 212KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 444KB - Virtual size: 1024KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE