Static task
static1
Behavioral task
behavioral1
Sample
28c66cda99ab6630263d2f1875af4161.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28c66cda99ab6630263d2f1875af4161.exe
Resource
win10v2004-20231215-en
General
-
Target
28c66cda99ab6630263d2f1875af4161
-
Size
332KB
-
MD5
28c66cda99ab6630263d2f1875af4161
-
SHA1
842cef248f9508872dcf5cb6515a838a86b19bdc
-
SHA256
99d2d32442f1af300657ac4d6e9e9ea799f82da570425ea155d97bc20e99ea3e
-
SHA512
0802e1ff9df17bf0eaefe7867438c69cb2931dbea9b0f4d8c4dc852fac8c61fd480c65e7a5788b3c5a2232a828d2d9e4dbede5d75064dd627dc13653166fd78e
-
SSDEEP
6144:TKiXI72caUFEnJoPr9xEaYZ5Xixn3PdVmd2H2F0ARzXeHoT3FSwye9xm:TKv72caUqKpXwXc/dEdfhXxQwye9xm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28c66cda99ab6630263d2f1875af4161
Files
-
28c66cda99ab6630263d2f1875af4161.exe windows:5 windows x86 arch:x86
bb299d1c0b6ef7c5f17db57abafd09b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
cfgmgr32
CM_Get_Depth_Ex
kernel32
GetTempPathA
TerminateProcess
GetModuleHandleW
SetCurrentDirectoryA
GetCommandLineA
GetModuleHandleA
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
TerminateThread
CloseHandle
CreateThread
SetThreadPriority
Sleep
GetCurrentProcess
SetPriorityClass
SetErrorMode
GetCurrentThreadId
lstrlenA
lstrcmpiA
DeleteCriticalSection
InitializeCriticalSection
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
shlwapi
SHGetThreadRef
ole32
CoInitialize
CoUninitialize
CoCreateGuid
Sections
.text Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 802KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ