Behavioral task
behavioral1
Sample
ca801df374ba4ed2b4c8a60eb32a9e345bee4ea24be67c5d8d87cc1e65e50cd4N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ca801df374ba4ed2b4c8a60eb32a9e345bee4ea24be67c5d8d87cc1e65e50cd4N.exe
Resource
win10v2004-20240802-en
General
-
Target
ca801df374ba4ed2b4c8a60eb32a9e345bee4ea24be67c5d8d87cc1e65e50cd4N
-
Size
87KB
-
MD5
facd8fcd9dfd462fad6970fb38b82920
-
SHA1
b62e6a08299d10ca55c49959c390862ef4ac6cbb
-
SHA256
ca801df374ba4ed2b4c8a60eb32a9e345bee4ea24be67c5d8d87cc1e65e50cd4
-
SHA512
8cbfe19a10894c1be828adf308e99517e6cfd9552f85dc8d4c7a64db4909eaaabc95456672bbb26b26aff55029bb72e8c25a12a423317280a60464deeb38a3e7
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TPUDTW7JJ7TPUb0IhAFV2RuH220IhAFV2RuH2d:fny1zUszUo+6V2RuH2j+6V2RuH2d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca801df374ba4ed2b4c8a60eb32a9e345bee4ea24be67c5d8d87cc1e65e50cd4N
Files
-
ca801df374ba4ed2b4c8a60eb32a9e345bee4ea24be67c5d8d87cc1e65e50cd4N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE