Static task
static1
Behavioral task
behavioral1
Sample
28aa7cba0d2bae32dec1eb6b1165c89c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
28aa7cba0d2bae32dec1eb6b1165c89c.exe
Resource
win10v2004-20231215-en
General
-
Target
28aa7cba0d2bae32dec1eb6b1165c89c
-
Size
2KB
-
MD5
28aa7cba0d2bae32dec1eb6b1165c89c
-
SHA1
b43bbcad225cda395423d7b03ff82af6e5dfcec1
-
SHA256
e2ef1fd62f5cf4efaef1796623b743552784654681026fbb0cdc9d422c4ae8b5
-
SHA512
a519fea42aebea0f1a62e9e7e5c97c5575597009f1b5c1695e4610b6ec6f4dd7c141a9d36526ca910bfa9ec910e6076239790127fe891f75cbb3d8e5e8caa1ab
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28aa7cba0d2bae32dec1eb6b1165c89c
Files
-
28aa7cba0d2bae32dec1eb6b1165c89c.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ