Static task
static1
Behavioral task
behavioral1
Sample
28fae11fc389947c41ca2be17104d7b464c0295f931bc75cc186ebb5cc8658f8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
28fae11fc389947c41ca2be17104d7b464c0295f931bc75cc186ebb5cc8658f8.exe
Resource
win10v2004-20230915-en
General
-
Target
28fae11fc389947c41ca2be17104d7b464c0295f931bc75cc186ebb5cc8658f8
-
Size
1.1MB
-
MD5
4253889edc55596e997aa797255e1c76
-
SHA1
0c031daf590859200c7a5a02c8a5fbbc23e4cc23
-
SHA256
28fae11fc389947c41ca2be17104d7b464c0295f931bc75cc186ebb5cc8658f8
-
SHA512
8d9987cf7049a0bfca37b8cac9c0c22dd2deb83113cfe37e81b49739dedea1ebb5d549987dfea02c51049e5508d4cbea0545baddffe0a34447b644c1525fb58b
-
SSDEEP
24576:rFmglggDFtKy6blUbKNKbOYEKljkPRMEVHiHLTwGsI/:rYVgOy6ieAbOYEKeVHkwG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28fae11fc389947c41ca2be17104d7b464c0295f931bc75cc186ebb5cc8658f8
Files
-
28fae11fc389947c41ca2be17104d7b464c0295f931bc75cc186ebb5cc8658f8.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 947KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE