Static task
static1
Behavioral task
behavioral1
Sample
capwareud.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
capwareud.exe
Resource
win10v2004-20240802-en
General
-
Target
capwareud.exe
-
Size
37KB
-
MD5
953597b00fe70c0a06d702cbc709fdbd
-
SHA1
abd4f3b657a9faa58257202922c7741cb9fac06c
-
SHA256
4273eb6bbc95b298e958afb5d5199e3cf09234d9dc6a609ec063827f54a157d6
-
SHA512
89904aabdf9de5f4706621dde8ee1fa1b98c224d6a83d740e1967a3afc4adbd6a4892aafbdc61a8e20e013440db61751798da93da2e63b23a2026601a5fa6b15
-
SSDEEP
768:0PFKLWc/s7liv5yshYFBnguFNLTXpL5RyrgIw9zB6SQ0Nh:oFKLsL54+9zo90Nh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource capwareud.exe
Files
-
capwareud.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ