Static task
static1
Behavioral task
behavioral1
Sample
cda81dc488ed6a64b8ad6128ba46a6f8f7d14f66e9e6ee278656c68e5bd984b9N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cda81dc488ed6a64b8ad6128ba46a6f8f7d14f66e9e6ee278656c68e5bd984b9N.exe
Resource
win10v2004-20240802-en
General
-
Target
cda81dc488ed6a64b8ad6128ba46a6f8f7d14f66e9e6ee278656c68e5bd984b9N
-
Size
96KB
-
MD5
3284bfe65ad518cbaa2cb7538760c500
-
SHA1
31ecb7c3e83a2e96e8b47b9ff64b46945ec6e1b8
-
SHA256
cda81dc488ed6a64b8ad6128ba46a6f8f7d14f66e9e6ee278656c68e5bd984b9
-
SHA512
56a6ea335c1d195b2c8a6bc5dc2555b28c149135215070421c90f01faa335f6d9afcfa772479274f4bc879467872dbf14a96911d7026f86538ac2c48e8ab99cd
-
SSDEEP
1536:s4GBz6clWT/74upLIcY/JZZzYoA59O7K+zbC2nTAatXg3D4I9u2tb74S7V+5pUMa:S6ckRiJZ5UIW2TAIwsI9ui34Sp+7H7wd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cda81dc488ed6a64b8ad6128ba46a6f8f7d14f66e9e6ee278656c68e5bd984b9N
Files
-
cda81dc488ed6a64b8ad6128ba46a6f8f7d14f66e9e6ee278656c68e5bd984b9N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ