Static task
static1
Behavioral task
behavioral1
Sample
2528aa984df7220f5ad527c896d5bcba.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2528aa984df7220f5ad527c896d5bcba.exe
Resource
win10v2004-20231215-en
General
-
Target
2528aa984df7220f5ad527c896d5bcba
-
Size
39KB
-
MD5
2528aa984df7220f5ad527c896d5bcba
-
SHA1
a17bb66b924f37d536eb6a8a995b87a823bc4f1e
-
SHA256
c612957e6d6dc043f1b2335d6e59525d16b1c9fb76a7c058579c9121b50b3322
-
SHA512
4d6ed60b2be7ad81b8e69b4db267aa2c56648dcd1c0b0fb9da0dbdeb7910531fed0a37d57d1bc0e37e62eab2a1c262822d7fd70ddb81c514805a087b8501d4c9
-
SSDEEP
768:68cw+7BFosu9rcZm9oMHZfuVwaBHzzvaGJIz+3bG7bHrdC0IkRDzrU:RWArZ2w8fzIFHr8YRDs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2528aa984df7220f5ad527c896d5bcba
Files
-
2528aa984df7220f5ad527c896d5bcba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE