Behavioral task
behavioral1
Sample
28e64df07595dc76dfe78a5719e36f25.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28e64df07595dc76dfe78a5719e36f25.exe
Resource
win10v2004-20231215-en
General
-
Target
28e64df07595dc76dfe78a5719e36f25
-
Size
57KB
-
MD5
28e64df07595dc76dfe78a5719e36f25
-
SHA1
bacfe6b41c7b7c803a7384211d467d0be07d1c29
-
SHA256
20a956e596d252fd11d72adb9605fbb79150776f1026dd2c55edf546c646b6fa
-
SHA512
608eeee3f725b8c9ab410722ed78e04bb0ba6bea45820f52903823450976a9d0e9b42b986f0a1d7cd8568fc3544aef3af232655ecd223a3c3f4c3c6f00a6993e
-
SSDEEP
1536:lig3QAvD50M9TEza6TEEEKi2ki1MCo8Km2yY81:Hp799ADEEEKvi8Ky1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28e64df07595dc76dfe78a5719e36f25
Files
-
28e64df07595dc76dfe78a5719e36f25.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE