Static task
static1
Behavioral task
behavioral1
Sample
63763d2a6478f4063e2f24ee4c642d5a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
63763d2a6478f4063e2f24ee4c642d5a.exe
Resource
win10v2004-20231215-en
General
-
Target
63763d2a6478f4063e2f24ee4c642d5a
-
Size
191KB
-
MD5
63763d2a6478f4063e2f24ee4c642d5a
-
SHA1
e002d0b9eee4ba213739979c487060f67efc87e6
-
SHA256
b70b377b864bc0b431e0b877848ea785c7a578df23e1beaca665180435c4f9c0
-
SHA512
2fc53b9f57d13ee48fc656b30dbf30cc27f1a30ea81a4aaa8ccb0947a878e4d15b378c0aa3c16bcf0f5faddf0536c10770f1595ca11e5ea154c9f7001dea67e3
-
SSDEEP
3072:GMM7aNwnbHW6TAlW5dA2aylqNBSix1i4cCJCY/bZclo7zbNFmBAXCLITnJWtwJCs:1ObHW61DaFNMWiQCY/bZcu7zbfY8FItO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63763d2a6478f4063e2f24ee4c642d5a
Files
-
63763d2a6478f4063e2f24ee4c642d5a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 353KB - Virtual size: 353KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 40.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ