Static task
static1
Behavioral task
behavioral1
Sample
63980d69618b7377638894f50ef67884.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
63980d69618b7377638894f50ef67884.exe
Resource
win10v2004-20231215-en
General
-
Target
63980d69618b7377638894f50ef67884
-
Size
412KB
-
MD5
63980d69618b7377638894f50ef67884
-
SHA1
6ee50a8e18d0247e607081aea85e6b3cde6bc807
-
SHA256
9944d98963b6617dcd0c086bbb3ae973fd5aa443d5a037a2b764dabd46efbeca
-
SHA512
6c3cd237105580cd9621ea98acf9f5a91f5c86cc38e975ca100d2bc66a5cc46c325be4f5e94bdac3efb966d8f02ffe9cd72a4f0671606c52604f8ecc20f3135c
-
SSDEEP
6144:0wmRlCQr6+cajlpw+n4UcQWTCwlfvg1yADR5E6DqguDwDsD/bDRGBMER9daD:0wmRsQG+hY0NnWTCwzAFkbGBMENa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63980d69618b7377638894f50ef67884
Files
-
63980d69618b7377638894f50ef67884.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
By MeTaL Size: 400KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
By MeTaL Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
By MeTaL Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ