Static task
static1
Behavioral task
behavioral1
Sample
caf949a410acac0bb38e484fdb31abce.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
caf949a410acac0bb38e484fdb31abce.exe
Resource
win10v2004-20231215-en
General
-
Target
caf949a410acac0bb38e484fdb31abce
-
Size
1024KB
-
MD5
caf949a410acac0bb38e484fdb31abce
-
SHA1
5e5085cf71cb5ce32dbcb7dd9b192b09251c6a1e
-
SHA256
7a6d88cbcc6e2861f3ab65e038838e533112d034b2c8bb3a3cdd8346c4435a19
-
SHA512
3977a8a9428d32d51af4758525a6edf041909ecb967e30b93ff010f8e98d0a3fef38bac56fd7e11f0c27f0a299ab561d25e086a2e726115dbaef64cf7f02e52a
-
SSDEEP
24576:n1WCcg4t5kYUteFYLjkgb7lBwT1Dpl3Za4sOa5:n9pMzFYLri1Dpl3Za4sL5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource caf949a410acac0bb38e484fdb31abce
Files
-
caf949a410acac0bb38e484fdb31abce.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 339B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE