Static task
static1
Behavioral task
behavioral1
Sample
28d87f61262e148edf05a988e79eb9ec.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
28d87f61262e148edf05a988e79eb9ec.exe
Resource
win10v2004-20231222-en
General
-
Target
28d87f61262e148edf05a988e79eb9ec
-
Size
152KB
-
MD5
28d87f61262e148edf05a988e79eb9ec
-
SHA1
4a45befc3fb8cb979abd708e99150c20e1eed216
-
SHA256
d76bf552e0a572b9aa432a25fa60f3f295540b4e4c8bdabae58c8821547ce5c1
-
SHA512
d668d13f8915557b518ef99fb6e086ff55c7e8be5ae860cc526bc82defa5dcbc986b4b136cae5a440fdad91093a172a8258b07374580b66c03dd79083ca67803
-
SSDEEP
3072:phbQYORRep5DYDAogPLdL8LFLjLWLtLiL2LeL3LOLH2WBLr4vkg/MTnEc7Sg+6Zi:Xc+fYMoqLdL8LFLjLWLtLiL2LeL3LOLN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28d87f61262e148edf05a988e79eb9ec
Files
-
28d87f61262e148edf05a988e79eb9ec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE