Static task
static1
Behavioral task
behavioral1
Sample
28cec6a50ff1bd958df369fab79f3ab9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28cec6a50ff1bd958df369fab79f3ab9.exe
Resource
win10v2004-20231215-en
General
-
Target
28cec6a50ff1bd958df369fab79f3ab9
-
Size
8KB
-
MD5
28cec6a50ff1bd958df369fab79f3ab9
-
SHA1
cffbdd7eefc3f5ab12728987121c1fd418cb030c
-
SHA256
e517ef76a6e1b93ba84d0736c7f4d5c42d26a0bb87e865285adee8d7ed03d960
-
SHA512
627be031a17d5161ae47402f372cf87cb04e023e51b0236c3c4c2e193c159dc9d8001381d10140c383ce73168b0cf6199827de4a0ce1102ff8d31df8846742db
-
SSDEEP
96:5dAlK5sd3C4QQXUOZvFYdUhoEYqqtywAkH6ppL1h28K0lAwLr11KkOx843/ySN7i:PAr3hEIX5qjfaHdlAgrY/bFUT7fcS71
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28cec6a50ff1bd958df369fab79f3ab9
Files
-
28cec6a50ff1bd958df369fab79f3ab9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.idata Size: 77KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BSS Size: 19KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rxdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcdata Size: 1KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.txdata Size: 21KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dotfix Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE