Behavioral task
behavioral1
Sample
63d59e94a182a4022e574cba1db63d90.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
63d59e94a182a4022e574cba1db63d90.exe
Resource
win10v2004-20231222-en
General
-
Target
63d59e94a182a4022e574cba1db63d90
-
Size
1.8MB
-
MD5
63d59e94a182a4022e574cba1db63d90
-
SHA1
aa4fe1473150654f3cf4f3cbd390ba880c498afb
-
SHA256
648ff7bff04cc06ff90fb03e5c97c7f71d0e24eda309d1d8ea595e6ebf000265
-
SHA512
765ab13403f37cb6b8aa3250632f3a1bc3d49cd0b926d9e4a3ab0b6c376121fa74a2f6c4b6ff2f35825a2d7e950c29a46aa6b7a4b7704df6491c30d7af9583ea
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHo:SCqm2Jpr0nNM7Dus7Nx2I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63d59e94a182a4022e574cba1db63d90
Files
-
63d59e94a182a4022e574cba1db63d90.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE