Behavioral task
behavioral1
Sample
ca13ce58962fba21d284d52e64ac40de12277e8ec49b0f26d05d850027591022.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ca13ce58962fba21d284d52e64ac40de12277e8ec49b0f26d05d850027591022.exe
Resource
win10v2004-20240802-en
General
-
Target
ca13ce58962fba21d284d52e64ac40de12277e8ec49b0f26d05d850027591022
-
Size
655KB
-
MD5
c7b5b4b987bc599d75cb560c49cccea5
-
SHA1
ed2785d3253d6201bffc80dd146d4f8c04542891
-
SHA256
ca13ce58962fba21d284d52e64ac40de12277e8ec49b0f26d05d850027591022
-
SHA512
dcb1da4e00ff2052b45d7e37bd1d4f9672462fddccd3e051af1751b246f69ed3fedb316955a78c715a000714d5ddf70b811d93427c9436bc145023c2303b73ef
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFn:1HNJDMor12mquPZjqR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca13ce58962fba21d284d52e64ac40de12277e8ec49b0f26d05d850027591022
Files
-
ca13ce58962fba21d284d52e64ac40de12277e8ec49b0f26d05d850027591022.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE