Static task
static1
Behavioral task
behavioral1
Sample
63dbdf9801348b5c64e40a82079513bb.exe
Resource
win7-20230712-en
General
-
Target
63dbdf9801348b5c64e40a82079513bb.exe
-
Size
946KB
-
MD5
63dbdf9801348b5c64e40a82079513bb
-
SHA1
9dc98beaa5776f9288aeccc42bf7472c354f6b01
-
SHA256
746d3f266a1d6c17fd484a741cad28bb0578e63d235abefb6f949b90a1108a96
-
SHA512
669de3d25350ea678b6f222437b855f01346eea165a7f354d5057e0b998b9c0e5c1b01c5fd6bd7a81270256f31f254a136e72610c500f371b8af84b00d3ce8dc
-
SSDEEP
12288:ZEKaJo0mJfggmcGNZ8SuXx9iS9fYb7alHx6T7cm6dOxF/syH2/DMCR+:Lr/mcGNZeXrZ1mcMT7x6gF72/Df+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63dbdf9801348b5c64e40a82079513bb.exe
Files
-
63dbdf9801348b5c64e40a82079513bb.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 942KB - Virtual size: 941KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ