Behavioral task
behavioral1
Sample
instacai.exe
Resource
win7-20240903-en
General
-
Target
instacai.exexx
-
Size
81.4MB
-
MD5
a7594c1aaa6ad63f5713467984c43f56
-
SHA1
0dbec6661b659262fb6fd383681637d561798345
-
SHA256
ce445c8619df81d6af32542e708c0f0610f9805d843d29beeb9759e92c87dc16
-
SHA512
86eb47fed4eec8c68728582337fefc3b04e3736b470fb7047e61377896ac6c37c8c5b383ec5c811b536b7ee2cad8874a8bb9e42c5d1e26dd5c6a65d882743945
-
SSDEEP
1572864:EIsFmG/LCRZCLYQUux91mt46TpmSHGErH5y0oBO/rWZqyljVnQ1nP:Rf0sQr1mt4WpmSzQBFR0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource instacai.exexx
Files
-
instacai.exexx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 461KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79.9MB - Virtual size: 79.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE