Static task
static1
Behavioral task
behavioral1
Sample
63b1f09bfb6861146217444e5d449118.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
63b1f09bfb6861146217444e5d449118.exe
Resource
win10v2004-20231222-en
General
-
Target
63b1f09bfb6861146217444e5d449118
-
Size
172KB
-
MD5
63b1f09bfb6861146217444e5d449118
-
SHA1
206dcd3a9c7e62fa31650c1c83e8ff01845f155e
-
SHA256
4319f0763b47e4f631191634d4851dcf5f105eb9ecc948fda42418c70167fce0
-
SHA512
d8cc51ad4f9de90b0f2d0f2a3561d2c7b99caeeefe66efa35d6e39498eb5feac6c0a19e1c8fe7101043bf00ca1584c3d73cf3119b59b4e5e7606ce7c9c7be325
-
SSDEEP
3072:QWt2DWrg0gy/pX9W1Fk9HHes4xMowTI9G2igGhg3OVKC8MA8tpx9flT1+SGBIfaZ:QWtyn0AKB+kI9R6IOVKYvp//hfAD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63b1f09bfb6861146217444e5d449118
Files
-
63b1f09bfb6861146217444e5d449118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 820KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE