Start
Static task
static1
Behavioral task
behavioral1
Sample
ca466eab78493e9bf06be0c147977f7e3008402eed3ac3ecfa846e21dc87fa53.exe
Resource
win10v2004-20240412-en
General
-
Target
ca466eab78493e9bf06be0c147977f7e3008402eed3ac3ecfa846e21dc87fa53
-
Size
2.2MB
-
MD5
c3911339207749f95660d447c0a29986
-
SHA1
671693a477403004553e3cd302422780439ce0a0
-
SHA256
ca466eab78493e9bf06be0c147977f7e3008402eed3ac3ecfa846e21dc87fa53
-
SHA512
3da25d622b4ebe2ecb7a0bf302502b618367fff308e8580a41b6ab3b5ef8f198077be9001facfd38f57ef1000087050b02b33d606671e3b81759102568b2d114
-
SSDEEP
49152:7eF1xn14NKyFmrSLL7UTo+JVdvIkyvIt0qTMWa8U:a1xn17CMe7EoeVdQkyv0LlU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca466eab78493e9bf06be0c147977f7e3008402eed3ac3ecfa846e21dc87fa53
Files
-
ca466eab78493e9bf06be0c147977f7e3008402eed3ac3ecfa846e21dc87fa53.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qfcrjxxe Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmgkbesv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE