Static task
static1
Behavioral task
behavioral1
Sample
95f4a0e9f6a6d0e55414ec7e5e95359d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
95f4a0e9f6a6d0e55414ec7e5e95359d.exe
Resource
win10v2004-20231215-en
General
-
Target
95f4a0e9f6a6d0e55414ec7e5e95359d
-
Size
82KB
-
MD5
95f4a0e9f6a6d0e55414ec7e5e95359d
-
SHA1
3a4f7fa515e7b20244a9d8b5f9c0493b6e84efb9
-
SHA256
bd84496d4921dba00e13ae69385821b98ab875ed6f8e8e1182d1eb4a889024b4
-
SHA512
e722bc3005858f5eeea96e465c7f7f772c09900ee87e378354f38792a053a963df37b02b6a83dac5f351a17f2b786f280bd0ac59184ec524349127d5b88efad4
-
SSDEEP
1536:9CqsGmhSD0g5Xbzllb+kE2gY16C945eYdgwMQCzBsLTxR18qRL5bdKqW4e:ImmhAbzllb+kE619q58wBCzaLTt8qx52
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95f4a0e9f6a6d0e55414ec7e5e95359d
Files
-
95f4a0e9f6a6d0e55414ec7e5e95359d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ