Behavioral task
behavioral1
Sample
95e55987e24b76952ba957931eae35a6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
95e55987e24b76952ba957931eae35a6.exe
Resource
win10v2004-20240226-en
General
-
Target
95e55987e24b76952ba957931eae35a6.bin
-
Size
92KB
-
MD5
95e55987e24b76952ba957931eae35a6
-
SHA1
75debc04c8b432e26581a1294d38b6d235034c1f
-
SHA256
acf83f94b8606c3e5d145ea3c1f8c16bb7d1116ad7c02f26f8bd497264c92b7c
-
SHA512
2209377850008d0d01f84d00c81bb0b465ee0337a784488ca4e2d684f66c32d79f684ec4e5968e5922cc12169e00b06ed044cfadcdf805242886ef3ca4c3150f
-
SSDEEP
1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRMy87UvTx:zCsanOtEvwDpjc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95e55987e24b76952ba957931eae35a6.bin
Files
-
95e55987e24b76952ba957931eae35a6.bin.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE