Behavioral task
behavioral1
Sample
28dcb123d7fdc7ac6c8a4529655f8a9d.exe
Resource
win7-20231215-en
General
-
Target
28dcb123d7fdc7ac6c8a4529655f8a9d
-
Size
2.9MB
-
MD5
28dcb123d7fdc7ac6c8a4529655f8a9d
-
SHA1
2abe5464510265fc96777ed948abb97d299523ad
-
SHA256
8a4ba3f6a94b151032c6e013fa68101c078baa3785cf60f2f6069fc5a4eeff84
-
SHA512
e2161ca95c716a651da433c8930e3c2348e9f2a59cb21934b50fe2628eeeeba44895452c940c5fb4f30b90ca2ca6ce8082ff3c6ab65c0a55cd30bd1709c6d7df
-
SSDEEP
49152:KGBzABJzYm4/PPp5TIW6zerkrGXT7bD3qoebj6RTRXzJ3GniT/cieat3KltJTD53:kJzYmGHvTcerk8/H3/eAXzJ3kUkbm6nD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28dcb123d7fdc7ac6c8a4529655f8a9d
Files
-
28dcb123d7fdc7ac6c8a4529655f8a9d.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iezkd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE