Static task
static1
Behavioral task
behavioral1
Sample
28b506d309943f91ee365873508b279c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
28b506d309943f91ee365873508b279c.exe
Resource
win10v2004-20231215-en
General
-
Target
28b506d309943f91ee365873508b279c
-
Size
464KB
-
MD5
28b506d309943f91ee365873508b279c
-
SHA1
9e62d5be5eb3a5663ac83c29a727916e44d1079f
-
SHA256
a6a1d260fea0bf0e614276f153259327da7ee1662f407a713df5ab3050a09b9a
-
SHA512
cce1e30aac3ffe7baa7b5263e3bb5fb1031152ce6dc2888cac3c579cb95cc6f3125cc339b90489cad339c5cb76592d90e4b5b3e410cbe193390b3b9d223bc0da
-
SSDEEP
6144:AB2Omy+wYg2R3aulTZNAND0RKd81DchT5CfbYVkN9BevzgVcve4qEEgJIWXONKHz:AB2w+wYg6Tza0cGV45CkVk3V4ImIAd1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b506d309943f91ee365873508b279c
Files
-
28b506d309943f91ee365873508b279c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 96KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 360KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE