Static task
static1
Behavioral task
behavioral1
Sample
95b4d33bcae39e7674a21b911008523d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
95b4d33bcae39e7674a21b911008523d.exe
Resource
win10v2004-20231215-en
General
-
Target
95b4d33bcae39e7674a21b911008523d
-
Size
683KB
-
MD5
95b4d33bcae39e7674a21b911008523d
-
SHA1
04009b71084ba086a7bc971323e021fad58ff4bb
-
SHA256
2d9c316fe2f4871f12a2b407d8bce8d3f2a172f9d2862a6a329000567d5cb64c
-
SHA512
2bb1adf1052889c1be98c025d44ddb6cb526d8a8c64b383f5627107e9e72337fa6ccb5f1bd91cf8b2e750c1f1f8aae9b73c931e26179478f7d2499df2870d254
-
SSDEEP
12288:6uAhfBG0zJhVwuAMPS0dFxNtKIr5nvMU3UEzBtp4OS/F1cCUZnwu+5F2+6b7MP+n:6uANk0zquXHNEIr50U5zl4V/F1cRxw/c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95b4d33bcae39e7674a21b911008523d
Files
-
95b4d33bcae39e7674a21b911008523d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 40KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 439KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Ramzey Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE