Static task
static1
Behavioral task
behavioral1
Sample
28756c338fdd950776c8c84231594044.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
28756c338fdd950776c8c84231594044.exe
Resource
win10v2004-20231215-en
General
-
Target
28756c338fdd950776c8c84231594044
-
Size
51KB
-
MD5
28756c338fdd950776c8c84231594044
-
SHA1
865ea46874ecf84fb9bc3d6e6c7ba4e8bc31e124
-
SHA256
40324cb5a763b49f5791abf176db8a7bbca1d72876e6d5448239fe77db2092c1
-
SHA512
283e1587386ecf86a00b6f538c1e92a5564a52ff7ba8276f89302022bcf4b523fb47797747d92004045856877bb53319d7c670bc4861dc70d09277cc98618e76
-
SSDEEP
1536:Z2q/cYGK8btPRn5RUPgKCq0zylRPubGdH+:ZF0Z5RU4/yLPqGN+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28756c338fdd950776c8c84231594044
Files
-
28756c338fdd950776c8c84231594044.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.RIF1 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF2 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE