Static task
static1
Behavioral task
behavioral1
Sample
caf6bbf650efe685856a8e8470696cda.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
caf6bbf650efe685856a8e8470696cda.exe
Resource
win10v2004-20231215-en
General
-
Target
caf6bbf650efe685856a8e8470696cda
-
Size
673KB
-
MD5
caf6bbf650efe685856a8e8470696cda
-
SHA1
23fece0bfd6e5c7a27df71d75db9dab07d9cf481
-
SHA256
107888ddea760fff4d2d52541ca8aac6161ca7bcdd04f45145664d2fc326387b
-
SHA512
269dfbc875795108b8e3bb804fe79777ada733c4c81eedbf9a8b7cf7cdd106b552e5a82d1dd03485b1f292178fd0cc0c77fbaa570a7bb786256fddd85b19a5b8
-
SSDEEP
6144:lJ82asJfnlAJwT71w+DtmVlTWw8oY4JHfTcE6sTNrCMHJeTBh+:lOWJ8wT7SoScCY4JHLcElTNm8eT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource caf6bbf650efe685856a8e8470696cda
Files
-
caf6bbf650efe685856a8e8470696cda.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 352KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l2 Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ