Static task
static1
Behavioral task
behavioral1
Sample
28371eee469d08a6930c021557d6a19badc35b5065f5cdcfc9cd4fb50c343dc5.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
28371eee469d08a6930c021557d6a19badc35b5065f5cdcfc9cd4fb50c343dc5.exe
Resource
win10v2004-20230703-en
General
-
Target
28371eee469d08a6930c021557d6a19badc35b5065f5cdcfc9cd4fb50c343dc5
-
Size
561KB
-
MD5
88d58644f66ca1e59db69a8b669b14cb
-
SHA1
106558c698b46b106c650e2d1ef4487888972a2b
-
SHA256
28371eee469d08a6930c021557d6a19badc35b5065f5cdcfc9cd4fb50c343dc5
-
SHA512
91a8896c50cf16a944743b3318ddacca8a5ddcaaa8f312466507fa9e63c714f822238d4d4a189bf7b8e7d22e0d126426d22d6b2e3a013ca76089ac9690560d05
-
SSDEEP
12288:61ZhU3s4L1ud7AnDUAB/Rm1P6ItWYlLbeJQJtI3eef0Z7dDyp:61zU3HYCUAygItWsbeiJOTodep
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28371eee469d08a6930c021557d6a19badc35b5065f5cdcfc9cd4fb50c343dc5
Files
-
28371eee469d08a6930c021557d6a19badc35b5065f5cdcfc9cd4fb50c343dc5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 560KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE