Behavioral task
behavioral1
Sample
63a7b802904e79a39d7721faf0321177.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
63a7b802904e79a39d7721faf0321177.exe
Resource
win10v2004-20231215-en
General
-
Target
63a7b802904e79a39d7721faf0321177
-
Size
133KB
-
MD5
63a7b802904e79a39d7721faf0321177
-
SHA1
87209ebafa3c48979590cde292f7703f2245409d
-
SHA256
9e00c1df6ee58841962a65f5038789cf0bbdaff008447f223b03a3535886d6b8
-
SHA512
a4df0f1755df3e5bf8d399c13369ec5a77ba0215c2ccfe25c8e5aa4f29d8e324112495190986472c5af4e2e8594d68a84726b32e0b44fe685b32399d00d525b7
-
SSDEEP
3072:FlaHUZdp96m7+ekcXSjCKBKhZt42K9+uTI8H2Q:Jdz6m7pk0SGRZuX+DJQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63a7b802904e79a39d7721faf0321177
Files
-
63a7b802904e79a39d7721faf0321177.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE