Static task
static1
Behavioral task
behavioral1
Sample
63b419af5fe9722bf22b4c1d5d675004d77133182b6bf9254494c538de25b4c6.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
63b419af5fe9722bf22b4c1d5d675004d77133182b6bf9254494c538de25b4c6.exe
Resource
win10v2004-20230703-en
General
-
Target
63b419af5fe9722bf22b4c1d5d675004d77133182b6bf9254494c538de25b4c6
-
Size
3.9MB
-
MD5
ddd99ab1a25c991456e41c4943e6f435
-
SHA1
ee08cfd6071a467d4de9ea27b28999476f180006
-
SHA256
63b419af5fe9722bf22b4c1d5d675004d77133182b6bf9254494c538de25b4c6
-
SHA512
fefbeba077f99195bd9f9711bc12a5cea058551a9752d68c96cf3687eafd55fe553521bde3c82f02d6f8c24f419eeb9d381fb25ef41fb31130dc0062b9f629e9
-
SSDEEP
98304:Pgfc+sUl2t+D8A08ii8hhqrVOE6yXscXr:PAc1UM2iBHSVOxS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63b419af5fe9722bf22b4c1d5d675004d77133182b6bf9254494c538de25b4c6
Files
-
63b419af5fe9722bf22b4c1d5d675004d77133182b6bf9254494c538de25b4c6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ftsafe Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE