Behavioral task
behavioral1
Sample
63974342799d73d3dec8982394d2a9a5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
63974342799d73d3dec8982394d2a9a5.exe
Resource
win10v2004-20231215-en
General
-
Target
63974342799d73d3dec8982394d2a9a5
-
Size
2.9MB
-
MD5
63974342799d73d3dec8982394d2a9a5
-
SHA1
796a2e651b15aae8f606be1ac7a036a9d800b8ad
-
SHA256
9debb60656b77a9fbc5bd43d292519bbeee9f2c1b32c9d7b7b30b1a86918de6a
-
SHA512
51848d4dd6d0c5aec2ee593c40accd325ec4ecbe03cce0ae9bbdd972807ee4f6ae8e99ebec1fd01323db5289df3c67b8ef04133f7ba0b5b481ae3d3c26939df8
-
SSDEEP
49152:zR76GS2wNYqjU+PfRlqWkNlRDA6P4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:teGxyYqj1bLkDi6gg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63974342799d73d3dec8982394d2a9a5
Files
-
63974342799d73d3dec8982394d2a9a5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE