Static task
static1
Behavioral task
behavioral1
Sample
028dfbad9f1794bf265515cd01265483.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
028dfbad9f1794bf265515cd01265483.exe
Resource
win10v2004-20231215-en
General
-
Target
028dfbad9f1794bf265515cd01265483
-
Size
51KB
-
MD5
028dfbad9f1794bf265515cd01265483
-
SHA1
1b07662fc18d232a1af6a9f11fae12051d5f4365
-
SHA256
cb45cd19308690c9aecc6944b79992c033729642846dfc26599f5e6b823b0a11
-
SHA512
39d73a467d30408149b25c8e73fd0cd14666edf5c3e1c26c8e814f7021a071a9a19027ea7333645993b7642c27fc41630caa500e79f1f3db08a3ab7f76856147
-
SSDEEP
768:l72eWJ+XjYmd3Nrv3cj2jRrgmC+MrohWUCBS6/o59Uhd29Y3UGpnfF7MkwygTp/i:d2jwUy973m2jZ3MfE9609Y3U0d7cygp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 028dfbad9f1794bf265515cd01265483
Files
-
028dfbad9f1794bf265515cd01265483.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE