Behavioral task
behavioral1
Sample
c95f954c9343c31097d1be2857b7c92f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c95f954c9343c31097d1be2857b7c92f.exe
Resource
win10v2004-20240226-en
General
-
Target
c95f954c9343c31097d1be2857b7c92f
-
Size
266KB
-
MD5
c95f954c9343c31097d1be2857b7c92f
-
SHA1
5c761adf378af7fb05889f97fd9a7b34285d1a60
-
SHA256
c195006555b6fa8d11a0ba35ce98007b5440daf85637b00169ba878c95248738
-
SHA512
487b4642eaaa4bb7beaa86c9ebebb7c40b26d61425ddaa67c99bc2b1f5fe18df1a5094fd7107e76152da6297fd58b9c1f26bf52183e5ced56a97aa19a9abeccb
-
SSDEEP
6144:O+sCmSy9zpgVxvpBqmqHyos51tOFpEMSGLRucwEpVKqNgQ:O+aSwyrBC051PxElNJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c95f954c9343c31097d1be2857b7c92f
Files
-
c95f954c9343c31097d1be2857b7c92f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE