Static task
static1
Behavioral task
behavioral1
Sample
28615f30f430ac984444a06ae0ff63bc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28615f30f430ac984444a06ae0ff63bc.exe
Resource
win10v2004-20231222-en
General
-
Target
28615f30f430ac984444a06ae0ff63bc
-
Size
27KB
-
MD5
28615f30f430ac984444a06ae0ff63bc
-
SHA1
2d7b8e93ccb0863630dfb061e248d4e071719601
-
SHA256
dda64c1838f3d8bb40283ab33002ed64e1bd7fde8d14c82c3cfc7dc3268d1c98
-
SHA512
f35f97c91194afc359c2fe56e7eb5f3bc054aaf0f6d0ebc4611c4ab936f0671f6fff12c8f1529d0f92185de0dda00a4ef1ae5b39bb1ac9b7663662b250bbd7dc
-
SSDEEP
384:ZpN8RR16NQgcqe2vDYz5b9x3o5OqhwqNAdFqN9RyPX4VeeuZiB6TKpVaU:ZE6uqe2cVBSJwq6dFqwv7id7p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28615f30f430ac984444a06ae0ff63bc
Files
-
28615f30f430ac984444a06ae0ff63bc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pyg0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pyg1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pyg2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE