Static task
static1
Behavioral task
behavioral1
Sample
95f994761adc36f8ddfda00c2b5308bb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
95f994761adc36f8ddfda00c2b5308bb.exe
Resource
win10v2004-20231215-en
General
-
Target
95f994761adc36f8ddfda00c2b5308bb
-
Size
404KB
-
MD5
95f994761adc36f8ddfda00c2b5308bb
-
SHA1
006300a847a4d260c5a9da3b07d5222ef83e14c9
-
SHA256
423344e72e6310def92171f2f24fcb301487c464784e77aae160092fdaee553d
-
SHA512
5668d192a5dcde14200685443ca5559f601c72e42a2bef67b04bbb9cb4f010783d86f4c2d703d28f73e2100f5eca6a1acac15be8224b2f078cb209b452d9e139
-
SSDEEP
6144:PlcWufJxE+FV8wO1Uzw4bATNhMF7NVwI//fIkh0hd+Ccxp5KNCW79:NcWuF8IwmMvMFpKIfInh7cBsCW5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95f994761adc36f8ddfda00c2b5308bb
Files
-
95f994761adc36f8ddfda00c2b5308bb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 74KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE