Static task
static1
Behavioral task
behavioral1
Sample
28563c65f8d2808c00a70eafd272ba83.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28563c65f8d2808c00a70eafd272ba83.exe
Resource
win10v2004-20231215-en
General
-
Target
28563c65f8d2808c00a70eafd272ba83
-
Size
704KB
-
MD5
28563c65f8d2808c00a70eafd272ba83
-
SHA1
d557096987c3b5186040816f5dfb73706116a9a4
-
SHA256
2ca704545e8d6c0eaf8a41cae73435bb50b7acc63c6aa503426d83c8db06e158
-
SHA512
08a143ee8d32ab6766f82fafe93d0f88fc25384c7a36c388654e7bf0d3907cd517e63d1a1c44eb4e9a8a04fed0c111c2fbd50a8b7f14d01f6c61413289ef6591
-
SSDEEP
12288:BRycYktU4g/n/t0EW5A0ckOvJwQ5oalK+Geh4v6jIk6bQQ52LwRg08S5nt1/q3:7xnU4gf2EW5AdHJr1kMh4vOIk6LXl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28563c65f8d2808c00a70eafd272ba83
Files
-
28563c65f8d2808c00a70eafd272ba83.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
New4 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE