Static task
static1
Behavioral task
behavioral1
Sample
28b4befd9f5b44620a89474c6764502d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28b4befd9f5b44620a89474c6764502d.exe
Resource
win10v2004-20231215-en
General
-
Target
28b4befd9f5b44620a89474c6764502d
-
Size
90KB
-
MD5
28b4befd9f5b44620a89474c6764502d
-
SHA1
2999af993a4d4df8a1cefc6d8e686cf89bcbdf32
-
SHA256
43a884ecfbae6a439c124290dd7464e8f6d2c36983fad27a0fc35e00a7ee4c71
-
SHA512
2517427bc16b8fda2fe3cd97bfb120c8cce68c504fc1caa6212e367ea0e9bd369e30e39faae6a1c75f0637357d8eea0bc9c0c4c537c9977df50ce05523fdd2eb
-
SSDEEP
1536:G/WHL2a5nZQS5iGmBG20arl0Uk6zeI9D+hvZNMasG0iJKKA4rvc9AGgnlWdWU:G/WHLJ575Rm24ea2rDrFrOAGglWn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b4befd9f5b44620a89474c6764502d
Files
-
28b4befd9f5b44620a89474c6764502d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE