Static task
static1
Behavioral task
behavioral1
Sample
28a5225bcfe35c7a98699207c335dc70.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28a5225bcfe35c7a98699207c335dc70.exe
Resource
win10v2004-20231215-en
General
-
Target
28a5225bcfe35c7a98699207c335dc70
-
Size
1000KB
-
MD5
28a5225bcfe35c7a98699207c335dc70
-
SHA1
a207c37c1a8a2c02c088c8df929031ba2798eb30
-
SHA256
eb1b39118daa61fd5be4a20260f43777f4a5cfa3337c4a799fa627c386e55996
-
SHA512
36fe759bcf707e4fede2991e3f88db7790744bb805e51488abc34be8a8748d2bab0f1accc0c96d5ae51d536b34726b323230ca94015eb785f8fe8287ba7710dc
-
SSDEEP
12288:ye1d2OckbhYRWshTxHJj81TmpeD2/R5ZuCECaBwQ2tb5JLrnylUPqt0gHDS7eyod:FcQYoiFUTmT//ZG1B+5vMiqt0gj2ed
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28a5225bcfe35c7a98699207c335dc70
Files
-
28a5225bcfe35c7a98699207c335dc70.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ