Behavioral task
behavioral1
Sample
ca20e7f84136127929bafda515dff1c177c5d26ea780cd3854d3bd71f0bfaf61.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
ca20e7f84136127929bafda515dff1c177c5d26ea780cd3854d3bd71f0bfaf61.exe
Resource
win10v2004-20240419-en
General
-
Target
ca20e7f84136127929bafda515dff1c177c5d26ea780cd3854d3bd71f0bfaf61
-
Size
1.5MB
-
MD5
4ee271981895a08c98afe3db5eb18696
-
SHA1
0d0c739a6c34f46b1d2473de5777d6c4e1700326
-
SHA256
ca20e7f84136127929bafda515dff1c177c5d26ea780cd3854d3bd71f0bfaf61
-
SHA512
6fa72cede1e53c704dc55d2a85e399b178e2d13ae4b0f983b3eab0b22ad3f715ca30de0347d9157b72980d53fbdea2802e7f3a8de3f8177c76839cfee0be62d3
-
SSDEEP
49152:6AZQ3Fq+usSlPfOwPpMRQO4eAsqWH6zR1:6Ai3kpsihPpM3fd6zR1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca20e7f84136127929bafda515dff1c177c5d26ea780cd3854d3bd71f0bfaf61
Files
-
ca20e7f84136127929bafda515dff1c177c5d26ea780cd3854d3bd71f0bfaf61.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE