Static task
static1
Behavioral task
behavioral1
Sample
28ddaf5e8818ff7c9c41f94850442a4a58504c548b46fe151c08b1c09f8c42dd.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
28ddaf5e8818ff7c9c41f94850442a4a58504c548b46fe151c08b1c09f8c42dd.exe
Resource
win10v2004-20230703-en
General
-
Target
28ddaf5e8818ff7c9c41f94850442a4a58504c548b46fe151c08b1c09f8c42dd
-
Size
2.2MB
-
MD5
cf7188055f723002f528f20ce4ac8da2
-
SHA1
81eb805c4bfe453b7ace45957cfd5c43fc0c9880
-
SHA256
28ddaf5e8818ff7c9c41f94850442a4a58504c548b46fe151c08b1c09f8c42dd
-
SHA512
8afe1b96f26ab7f936fe209d00d19df176ee957e7c7611b71e4e1d3f7e6ff3f820a599c1282d57f90eddca4c03d207336a1e9608f7a4977a5685bd88e26b2fae
-
SSDEEP
49152:V8X07DSLvxp+79oXePxRWGT3XpXsDvo/yCWaCRq5AL7gj:V00cv/+7KSxRBI9hRjgj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28ddaf5e8818ff7c9c41f94850442a4a58504c548b46fe151c08b1c09f8c42dd
Files
-
28ddaf5e8818ff7c9c41f94850442a4a58504c548b46fe151c08b1c09f8c42dd.exe windows x86
fdada21a95eafabc28c0a72d0e7702e1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dbghelp
SymSetOptions
kernel32
VirtualFree
user32
EndPaint
advapi32
RegOpenKeyW
oleaut32
SysAllocStringByteLen
msvcp140
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
wininet
InternetOpenA
vcruntime140
__current_exception_context
api-ms-win-crt-runtime-l1-1-0
_cexit
api-ms-win-crt-string-l1-1-0
_stricmp
api-ms-win-crt-environment-l1-1-0
_wdupenv_s
api-ms-win-crt-heap-l1-1-0
_callnewh
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
shell32
SHGetFolderPathW
Sections
.text Size: 678KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 807KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 746KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ