Static task
static1
Behavioral task
behavioral1
Sample
caf19367023b6c82f5b6b305712dedf0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
caf19367023b6c82f5b6b305712dedf0N.exe
Resource
win10v2004-20240802-en
General
-
Target
caf19367023b6c82f5b6b305712dedf0N.exe
-
Size
76KB
-
MD5
caf19367023b6c82f5b6b305712dedf0
-
SHA1
72282843ad6511944f23a7ed25ae88c9397b2b24
-
SHA256
c38588cad9b7e30fcb90bb49caf052980057f847421f28b985d68769bd27ab4b
-
SHA512
b6a0cfb2a66ed57eeacc979bc22f7ead8e1a38c2e785418ea85c76920bdf0cc82e7b15306dd5fad2307083ce0f3589972c81496f401d080a069be389d8ee47aa
-
SSDEEP
1536:86RAo0ej2d6rnJwwvlNlIUBvsI7hrhEh9cpDN/qhAvP3OChhW4dI0h4HCIzhUvT+:xAo1lOwvlNlXBvsI7hrhEh9cpDN/qhAY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource caf19367023b6c82f5b6b305712dedf0N.exe
Files
-
caf19367023b6c82f5b6b305712dedf0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE