Behavioral task
behavioral1
Sample
095cf86cb2a6c9060881ec8c2d56cbee.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
095cf86cb2a6c9060881ec8c2d56cbee.exe
Resource
win10v2004-20231215-en
General
-
Target
095cf86cb2a6c9060881ec8c2d56cbee
-
Size
64KB
-
MD5
095cf86cb2a6c9060881ec8c2d56cbee
-
SHA1
05b975ae04f402d1b52d16a92767b29c8b743b5b
-
SHA256
00f5eb1b405ccfaa265e7c851819daa07c0a1cc71d85769aeba3e5c767258d86
-
SHA512
22bb7723849a9a468efa25044c5e544803d206d1f36b04fdd489e0526ff804452eb329724d6701ef61c462c55bbe23c4605688f14f20bd83d7b490883c93f933
-
SSDEEP
1536:TrBK8fy+YY3rNSxCdax1FcCgEO4WErcGhxFKDMOOa7nouy8j:TrBK8fxYY3QxCdax/77OIrthxFK5jouV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 095cf86cb2a6c9060881ec8c2d56cbee
Files
-
095cf86cb2a6c9060881ec8c2d56cbee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
���� Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
즹�� Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE