Static task
static1
Behavioral task
behavioral1
Sample
028d4fa266a293a7c4406055777806ef.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
028d4fa266a293a7c4406055777806ef.exe
Resource
win10v2004-20231222-en
General
-
Target
028d4fa266a293a7c4406055777806ef
-
Size
98KB
-
MD5
028d4fa266a293a7c4406055777806ef
-
SHA1
c177d8094306248e8ffc94f3c487986f84dbaf6e
-
SHA256
7dd484ea2fd7d68cb7c697573b7c1cebf8319a8b5107ef7e1dba8b660c6b436e
-
SHA512
df1c35f8c0ee9fbb997ebbecb80fe34b32d8df2ee14aeee49710c56180917ee6e042eb8c382f1b50a0480a300727df903aebc27ec05cf30779ee94952f61db40
-
SSDEEP
3072:JwFDYh2DPSJhpxcHxK4l5La5c00rKBv3StDVC:ulrDq0wt0rhDVC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 028d4fa266a293a7c4406055777806ef
Files
-
028d4fa266a293a7c4406055777806ef.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE