Behavioral task
behavioral1
Sample
ca02dc389c2882d81655c733b32a2c7215c9e422ae417acfacd8c4af80edcf80.exe
Resource
win7-20240704-en
General
-
Target
ca02dc389c2882d81655c733b32a2c7215c9e422ae417acfacd8c4af80edcf80
-
Size
1.2MB
-
MD5
cc47c92988a56b4e9c7457ebad974561
-
SHA1
8694b1e93d515b6154d883421f5374e526056a20
-
SHA256
ca02dc389c2882d81655c733b32a2c7215c9e422ae417acfacd8c4af80edcf80
-
SHA512
70e68a1f7b8cf975361bd072e73ec66b0ecb9e8ce158b0c184ae94066a9740e03e1f3bda4de05393ff83f5feae365ad9b4daa2dbabda8f5fd1ec0069a0fcd751
-
SSDEEP
12288:zr6JAz8EXcrtVYzgN5pDJ2FtytN2rjBW7LFsppL4YOZ:mq6+zWNJ2FtcN23BIFgI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca02dc389c2882d81655c733b32a2c7215c9e422ae417acfacd8c4af80edcf80
Files
-
ca02dc389c2882d81655c733b32a2c7215c9e422ae417acfacd8c4af80edcf80.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE