Static task
static1
Behavioral task
behavioral1
Sample
caf94d1d39a2a104d2c117bb75680403c91c638abf7b3a050ef6886e9b5bb87f.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
caf94d1d39a2a104d2c117bb75680403c91c638abf7b3a050ef6886e9b5bb87f.exe
Resource
win10v2004-20240412-en
General
-
Target
caf94d1d39a2a104d2c117bb75680403c91c638abf7b3a050ef6886e9b5bb87f
-
Size
1.4MB
-
MD5
86b5855a9a5e6d02e57eadb4f9b1016e
-
SHA1
565dfe4c7578c273119b112e27b4106cede71226
-
SHA256
caf94d1d39a2a104d2c117bb75680403c91c638abf7b3a050ef6886e9b5bb87f
-
SHA512
c33d82715d262d09dbfb991c0b6c11990e3175db98edac3fe282cb605a24c0d0b8f11f8b97cfdd2a223214a7a1bb7dd617ec6b76f9b53414eecda2fa61816f34
-
SSDEEP
24576:lq8N2JRJf46ARnP1gi5005h1wSMJ/Sf1/2yml/ZgXMndy7b3ONsg+ImxbkgABURX:V2rct19F5h1wSMJa/2x1Qvr5g1hA
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource caf94d1d39a2a104d2c117bb75680403c91c638abf7b3a050ef6886e9b5bb87f
Files
-
caf94d1d39a2a104d2c117bb75680403c91c638abf7b3a050ef6886e9b5bb87f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE