Behavioral task
behavioral1
Sample
63a9ebc64391b04d9d99d3d96368c9b9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
63a9ebc64391b04d9d99d3d96368c9b9.exe
Resource
win10v2004-20231215-en
General
-
Target
63a9ebc64391b04d9d99d3d96368c9b9.bin
-
Size
1.5MB
-
MD5
63a9ebc64391b04d9d99d3d96368c9b9
-
SHA1
6d296cd04404105e23899e48beff69339b0ee8db
-
SHA256
31fc6001f97b2f57fea0dc577989e8f49829659b2a136a2716ba6513cc039b18
-
SHA512
8ea4aa433b63b7293e226d8c317b6ac1a035e80c7b89f3740c223060278dadc3f58e1e25091cfe6311cc731ca4f99e8a26b3cab81b1627f17baac5159cb94516
-
SSDEEP
24576:Um0IT+OsjtANLpIv8heVBAKIC4zf4nTBxTk0BPLWO+xxLn+cW:d0c+O8M27BAdC4zgnT4qWzxLj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63a9ebc64391b04d9d99d3d96368c9b9.bin
Files
-
63a9ebc64391b04d9d99d3d96368c9b9.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE