Static task
static1
Behavioral task
behavioral1
Sample
cae605b78297b8c24f0cf048a38afbe7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cae605b78297b8c24f0cf048a38afbe7.exe
Resource
win10v2004-20240226-en
General
-
Target
cae605b78297b8c24f0cf048a38afbe7
-
Size
64KB
-
MD5
cae605b78297b8c24f0cf048a38afbe7
-
SHA1
fc8a2b19dfe70cff2407774f165dae31f6912906
-
SHA256
c7413113105daed6130ce1662d8bade253b6c085c9dc2c4fc96e01015e827c1c
-
SHA512
7808e00e3a57cb14f91272ed7c856d28a68a08d194a4a7d32b0c6e25ad982360f0b0a5e8dfda3e1e5cbf06e17ee3a0f048c2105f6ba2eb4a01c6a648527bf4bd
-
SSDEEP
1536:7BlhSCnLSDK7vDnvVcXv73RAuiNYtXl1Oqo99Qhy6K4bUM3HO7zI:7B7ScLpLtmv73VEYFTeQPRUmuv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cae605b78297b8c24f0cf048a38afbe7
Files
-
cae605b78297b8c24f0cf048a38afbe7.exe windows:4 windows x86 arch:x86
f6f40e6cc88102198abe3b74d7e23036
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ExitProcess
GetCommandLineA
GetCommandLineW
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapCreate
LoadLibraryA
ReadFile
WaitForMultipleObjects
advapi32
CryptSetProviderW
ole32
StringFromGUID2
IsEqualGUID
setupapi
SetupDiGetDriverInstallParamsA
olepro32
OleLoadPicture
OleCreateFontIndirect
OleCreatePictureIndirect
OleCreatePropertyFrameIndirect
OleIconToCursor
user32
GetKeyboardLayoutList
Sections
.text Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ