Static task
static1
Behavioral task
behavioral1
Sample
428c48f1c067ba3b1435c5e556e331bb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
428c48f1c067ba3b1435c5e556e331bb.exe
Resource
win10v2004-20231215-en
General
-
Target
428c48f1c067ba3b1435c5e556e331bb
-
Size
5.7MB
-
MD5
428c48f1c067ba3b1435c5e556e331bb
-
SHA1
588adf58c1af13dc80ca5e07071800b4a7f8b5ac
-
SHA256
b6787afbcea74109a78a9c3310d4e255849793cafc8116a3e5f6393ac0f79e79
-
SHA512
f0bb41b89bb801bbe2e12bd885663bb4fd31de7b1af7891a312f8699371a8b1f3b2cf227a054ee1b71f8519dd9bbd1bcffe3dec99c9a36dd0f7f0707f1782250
-
SSDEEP
98304:/8k8+RIMtAO1r5EHT7SPy/XXtlmrAAgzX18k8+RIMtAO1r5EHT7SPy/XXtlmrAAh:EMIMtAO1r5EHT7SPy/XXtMIuMIMtAO1J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 428c48f1c067ba3b1435c5e556e331bb
Files
-
428c48f1c067ba3b1435c5e556e331bb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE