Static task
static1
Behavioral task
behavioral1
Sample
63d1d7ec84d6aa5edfa8b5344271a15228ea2daadbd72299409f16cabb63f853.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
63d1d7ec84d6aa5edfa8b5344271a15228ea2daadbd72299409f16cabb63f853.exe
Resource
win10v2004-20240426-en
General
-
Target
63d1d7ec84d6aa5edfa8b5344271a15228ea2daadbd72299409f16cabb63f853
-
Size
45KB
-
MD5
cfa3a7713e6d22d9fa18ca7d8efc9cfa
-
SHA1
89208bf1fa05b0692e2bc2da818cf98fd25db1f5
-
SHA256
63d1d7ec84d6aa5edfa8b5344271a15228ea2daadbd72299409f16cabb63f853
-
SHA512
80e188417ba649766a036d117aa5ca99379889bba2ec8f02a49660c860958d47a6fa65ccb1a1b9b637e8729cf407c9f81d3f90f82c2f1652ff8654bc0e64a700
-
SSDEEP
768:lvQ5qDLHRdw2iPSMEk/6KnEMb96hyXB80EEEEEMeXXXX:lvQoLHjw2iWPKn7qyXS0MXXXX
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63d1d7ec84d6aa5edfa8b5344271a15228ea2daadbd72299409f16cabb63f853
Files
-
63d1d7ec84d6aa5edfa8b5344271a15228ea2daadbd72299409f16cabb63f853.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ