Behavioral task
behavioral1
Sample
28b7cdabf93c162a506271c1d35e3830.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28b7cdabf93c162a506271c1d35e3830.exe
Resource
win10v2004-20231215-en
General
-
Target
28b7cdabf93c162a506271c1d35e3830
-
Size
161KB
-
MD5
28b7cdabf93c162a506271c1d35e3830
-
SHA1
be1ee6a750c1267e5db81aa1deb7af04417599ab
-
SHA256
f1ae14bc162e0f101cb0a1ac3d53ca80d614973399bc30ef9cc164403477c00f
-
SHA512
1b74e1930d2ee12d710183c050b5078fcf51ffde5c5959606bd36b444ae84f47f8bd8cabbb63ff4571d0f90d926bfc4c3686b3dfffe67bfe1ccd0861c3e5f41a
-
SSDEEP
1536:woQFlSAs4BdbFPMrSpc7T1WSHfnNK1PozvE1V0txJQwTa:wbFlSAs4BZFPMPHIgKZ1G5QwT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b7cdabf93c162a506271c1d35e3830
Files
-
28b7cdabf93c162a506271c1d35e3830.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE