Behavioral task
behavioral1
Sample
63b55fafb76125ff8904d3e772fdc7b0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63b55fafb76125ff8904d3e772fdc7b0N.exe
Resource
win10v2004-20240802-en
General
-
Target
63b55fafb76125ff8904d3e772fdc7b0N.exe
-
Size
161KB
-
MD5
63b55fafb76125ff8904d3e772fdc7b0
-
SHA1
dde6e08d965dfb58288ba3424594f2a553ac1097
-
SHA256
61f3a4e0e8a7a2cf62a8d7f14763e7188ef80a8214466dc78a90754ac6087c5e
-
SHA512
eb959eb3598db62c2d0681e2beec13c3b7a1f7c996016d2b2098203631838a99640f0f28a2de07eb52feeb3226122d58e1ad4ab87db97de5b3c4196e195a86ed
-
SSDEEP
3072:fnyiQSox569iMGfUSaOy9SnJUwFU+FUhFUeFUXFUqyqKRrpF6Pwl:KiQSox569iMGsSaOyi6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63b55fafb76125ff8904d3e772fdc7b0N.exe
Files
-
63b55fafb76125ff8904d3e772fdc7b0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE