Static task
static1
Behavioral task
behavioral1
Sample
28317ced7e30ce6ff9c200113cdf25475e20cd95a77bb78b90f37aea3cf82d1d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
28317ced7e30ce6ff9c200113cdf25475e20cd95a77bb78b90f37aea3cf82d1d.exe
Resource
win10v2004-20230220-en
General
-
Target
28317ced7e30ce6ff9c200113cdf25475e20cd95a77bb78b90f37aea3cf82d1d
-
Size
610KB
-
MD5
67dee355ac2341214dea0fcd87f9ce72
-
SHA1
ead53512ae6f267fc369ce27ce88092840f36965
-
SHA256
28317ced7e30ce6ff9c200113cdf25475e20cd95a77bb78b90f37aea3cf82d1d
-
SHA512
a47eafd48109dd9f5f5768315d7e2e8af93a47ee7494980b679379191fc826e4b63f14b9d33f0fee86f0d9a84c46c6bebcc66eb665b02056bc127f165ea5526c
-
SSDEEP
12288:n1+dUEwSczaijVyu8xBwx7Luvk02OUh0okz/6/XyRo:n8HFijVKxSxoJUhMzOXg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28317ced7e30ce6ff9c200113cdf25475e20cd95a77bb78b90f37aea3cf82d1d
Files
-
28317ced7e30ce6ff9c200113cdf25475e20cd95a77bb78b90f37aea3cf82d1d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 521KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ