Static task
static1
Behavioral task
behavioral1
Sample
28bb566fcf3b8099093d0906ddf9388e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28bb566fcf3b8099093d0906ddf9388e.exe
Resource
win10v2004-20231222-en
General
-
Target
28bb566fcf3b8099093d0906ddf9388e
-
Size
11KB
-
MD5
28bb566fcf3b8099093d0906ddf9388e
-
SHA1
ef7ae2f2f21c702c80fd32d5690b060487cdf1b3
-
SHA256
e7d7c54266ea63b19d1d281df200983ceacdc9c057f2a107b1789b311ca3184b
-
SHA512
dc928b4745de55b3c9bffaffa5de3a8c5ac8d060af510d37a6c61fa73910ed77a26d1d831cfdc17e6d78911cb45ae71694737cb9665085aa8c003bffd6a20275
-
SSDEEP
192:gKLST5C5hhDFvpAP6dt8pZ5Gx7hbETZiELuhoekru:gkI5C5hhDFvGCdCpv+NbETrLuhJkru
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28bb566fcf3b8099093d0906ddf9388e
Files
-
28bb566fcf3b8099093d0906ddf9388e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE