Behavioral task
behavioral1
Sample
28b91d99ea10954d90cb06a90e483a84.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28b91d99ea10954d90cb06a90e483a84.exe
Resource
win10v2004-20231215-en
General
-
Target
28b91d99ea10954d90cb06a90e483a84
-
Size
38KB
-
MD5
28b91d99ea10954d90cb06a90e483a84
-
SHA1
7248ed2d2f5d898213968e9be78e289ddb29a762
-
SHA256
8170b85d3217f2495b347a9eb0bb3ea2229f0f155258508df0d20434906aa40d
-
SHA512
843277593bbf9354afe288a91e18f1df911fd26243e65036d465c0735d62c0a9d37f55c693db3f20f946b806016148919fe27aac9d46da8d4aaa08a4d817fcd8
-
SSDEEP
768:5c3Z5hLiqO4Re4U29JLKXTEohZZRmUPQtyOR4JEZXaZg8uRxY7TJ:Ojgujx2mUItR6EZXaARxg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b91d99ea10954d90cb06a90e483a84
Files
-
28b91d99ea10954d90cb06a90e483a84.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE