Behavioral task
behavioral1
Sample
caf4db0d1e60e40d5bd544906254b313.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
caf4db0d1e60e40d5bd544906254b313.exe
Resource
win10v2004-20240226-en
General
-
Target
caf4db0d1e60e40d5bd544906254b313
-
Size
288KB
-
MD5
caf4db0d1e60e40d5bd544906254b313
-
SHA1
0f319e29d3f2b190a16f292a4aab611c919d5920
-
SHA256
647028a80c7c22327bf19458cf4745018e1c212c65d61f072fd61fd8ae1ae009
-
SHA512
8929ddb0f35133520d1a65e43739876e76c3e6e5b8bc9f4c4e661a9590cc40e78c388893f87fcdb5811d1b794f27b94eaa72a7a6f180287c4f49844e69f773bf
-
SSDEEP
6144:EolgHypkl0uKbRWZADZX6k5sl+dcAXxknUQbCxlVxt2STb/kJ7j8:tyHl1Zycom8xoNC3Vxt2STjEH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource caf4db0d1e60e40d5bd544906254b313
Files
-
caf4db0d1e60e40d5bd544906254b313.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 277KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE