Static task
static1
Behavioral task
behavioral1
Sample
caf6f040b8ae422e7c2b4b7278b89767.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
caf6f040b8ae422e7c2b4b7278b89767.exe
Resource
win10v2004-20240226-en
General
-
Target
caf6f040b8ae422e7c2b4b7278b89767
-
Size
535KB
-
MD5
caf6f040b8ae422e7c2b4b7278b89767
-
SHA1
bd14dc6102d20a5034e2362fb42cbe59edf91553
-
SHA256
61e719adafb3bbe91f0e3aed9fab9944c4b5353b72ba7f29fc2393076898989a
-
SHA512
eb6becc3998fd8e56bc050b136fdd57629af701bbc966aec83426e8ab80c6b5201c9237e681cc43798ff066e370f37e8a03669d93ebd07cbf3d69a8fb6e27f93
-
SSDEEP
6144:8zChFX1KEV5Vsir5jTVdSh1efs+0qOnvL5U/Df1kg+SmXNbUksbvxAB0BwOBL1dS:8z2Foi1ToGj0qOTcFwyrxF0IXzdQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource caf6f040b8ae422e7c2b4b7278b89767
Files
-
caf6f040b8ae422e7c2b4b7278b89767.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 531KB - Virtual size: 530KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ