Behavioral task
behavioral1
Sample
63fa4c5601e524553348dd1722595c20N.exe
Resource
win7-20240708-en
General
-
Target
63fa4c5601e524553348dd1722595c20N.exe
-
Size
59KB
-
MD5
63fa4c5601e524553348dd1722595c20
-
SHA1
6d77c4719907a48fc9e8cb634bb6bb8a9503e839
-
SHA256
3981cf290a53db6ef3ffd1d183097f37f81abc60ac923f8204fc053959bbb918
-
SHA512
fd2f81d9af4043d3ea50a460f30445507e80b95161b491ac847884b3e574bf0716de5aa063522644f21877766865e583df8727a2c157046141eff7447e011b0e
-
SSDEEP
1536:q6fFevAiRj/tfI96kLXRThUPSZ/6zXa7s6Ny:q6fFevJRbtfI9VTKSCL6N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63fa4c5601e524553348dd1722595c20N.exe
Files
-
63fa4c5601e524553348dd1722595c20N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE