Behavioral task
behavioral1
Sample
28a4abb92879e400b54472ac1fd1f771.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
28a4abb92879e400b54472ac1fd1f771.exe
Resource
win10v2004-20231215-en
General
-
Target
28a4abb92879e400b54472ac1fd1f771
-
Size
101KB
-
MD5
28a4abb92879e400b54472ac1fd1f771
-
SHA1
36471d43d97b7a6e088119659a25cf26f0344351
-
SHA256
3dc47f7489bdd3ca083c4583f7ba467a94c63d2cf0e5d83ba6a246d66f310e9d
-
SHA512
86bfefdcf2a93667bb3d13017af5599040c3551057090b1834d263b4dd6cc715b39cf76358dc1d94de748ecb4f068dce05b8a65d9f75af61673c08cf46ce2609
-
SSDEEP
3072:SKcWmjRrz3ZKcWmjRrz3J3y66qtNWUulf:hGyGP6qbWU2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28a4abb92879e400b54472ac1fd1f771
Files
-
28a4abb92879e400b54472ac1fd1f771.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE