Behavioral task
behavioral1
Sample
95b90248d432919680e63edfe97e08a3986614497ab3c8db43c6280ca39b05c8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
95b90248d432919680e63edfe97e08a3986614497ab3c8db43c6280ca39b05c8.exe
Resource
win10v2004-20240802-en
General
-
Target
95b90248d432919680e63edfe97e08a3986614497ab3c8db43c6280ca39b05c8
-
Size
111KB
-
MD5
58dc9fe8797f4363e90da348073cfdff
-
SHA1
7412f16486eb371ce506677075ed451faa759ef5
-
SHA256
95b90248d432919680e63edfe97e08a3986614497ab3c8db43c6280ca39b05c8
-
SHA512
67faa92eecab2a5a874aeae9e5e5ca0135e4e2ce209f6831d29649e7268391e6ce9768d4b788071c186cbe2e426aaf96d9ce2676d87cd2cf75b7b74303c8c672
-
SSDEEP
1536:ELNIW39SaZTbFARlq7jC1OZstZu0TSVEdUJWTWd18fBz:ELlbZTZX3BAtTSVEdUJWTWd18fB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95b90248d432919680e63edfe97e08a3986614497ab3c8db43c6280ca39b05c8
Files
-
95b90248d432919680e63edfe97e08a3986614497ab3c8db43c6280ca39b05c8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE