Static task
static1
Behavioral task
behavioral1
Sample
cda9f3244cbd61ade333741229d589ae.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cda9f3244cbd61ade333741229d589ae.exe
Resource
win10v2004-20240226-en
General
-
Target
cda9f3244cbd61ade333741229d589ae
-
Size
13KB
-
MD5
cda9f3244cbd61ade333741229d589ae
-
SHA1
01eb1d433e0a59b5c720e27461789575595cbef8
-
SHA256
7bf7733721e3ca56128acc966b53a183288e1dd95868d3a1c807107d811baee2
-
SHA512
4464360bfae4b9dabfc354203f456d6e895a96453093ee69230663ee8bf10c2ff607eedc1dfd25e50f5418e326081db7b107a67bdb2391e79ec3f414ab135e7a
-
SSDEEP
384:keUQ3E6sqWu6dEAQaFy2rY5ShhiMvZcdrEIy0o:fD3fgu6dHxYqhiMvudrENL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cda9f3244cbd61ade333741229d589ae
Files
-
cda9f3244cbd61ade333741229d589ae.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddt Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE