Static task
static1
Behavioral task
behavioral1
Sample
cad0c84d36c92384c9cceb0e358bdba94312ababcfbc12cc206149e72f4ae7fd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cad0c84d36c92384c9cceb0e358bdba94312ababcfbc12cc206149e72f4ae7fd.exe
Resource
win10v2004-20240412-en
General
-
Target
cad0c84d36c92384c9cceb0e358bdba94312ababcfbc12cc206149e72f4ae7fd
-
Size
118KB
-
MD5
b2bca9aa8f83e03339ee6d0de78c1600
-
SHA1
d77855d63e5dc6775caf91c93a09ecc04dbfc6c4
-
SHA256
cad0c84d36c92384c9cceb0e358bdba94312ababcfbc12cc206149e72f4ae7fd
-
SHA512
6679e53c7b81ae7e30f426ff6e3a54424f0e8a61840122a88aecf57d20e8505a4dae5d1f459deb856aaadba5d6f1b8adaf6d9f58e119c9e2ff7aa360fbaa0330
-
SSDEEP
3072:zOjWuyt0ZsqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPb:zIs9OKofHfHTXQLzgvnzHPowYbvrjD/m
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cad0c84d36c92384c9cceb0e358bdba94312ababcfbc12cc206149e72f4ae7fd
Files
-
cad0c84d36c92384c9cceb0e358bdba94312ababcfbc12cc206149e72f4ae7fd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
2524gcax Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
25j9imfs Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f611cjyn Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE