Static task
static1
Behavioral task
behavioral1
Sample
28f4759dcdd146ed9e7bfa4791887057.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28f4759dcdd146ed9e7bfa4791887057.exe
Resource
win10v2004-20231215-en
General
-
Target
28f4759dcdd146ed9e7bfa4791887057
-
Size
48KB
-
MD5
28f4759dcdd146ed9e7bfa4791887057
-
SHA1
96e7fba5876904222b333cd90afb295891bad513
-
SHA256
4a4a56b493665c79d392c32be3511c8a2a5c7cd94f1ec0f2a844e73648d7a0f3
-
SHA512
4bb082a7e76d70944055edc3ebaaec08833b65daf875c2ea5fede0e2bc50cffa003cc0d49ef467e72afe14d59cce4f0e9d4f705669d2bf16961e802f835b815d
-
SSDEEP
768:qMTOj5R48oa0/SI3GbzQRP+vp26LHllnmJ4/vJ68TVrjQWvKr7+:qMOzXovqadP+vpl3u4DVjQWC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28f4759dcdd146ed9e7bfa4791887057
Files
-
28f4759dcdd146ed9e7bfa4791887057.exe windows:4 windows x86 arch:x86
eb15dca5f63ebac7bcf43fad417fbc3f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateIoCompletionPort
CreateMutexA
CreateThread
FindClose
GetCommandLineA
GetDateFormatA
GetFileSize
GetLastError
GetLocaleInfoA
GetModuleHandleA
GetProcessHeap
GetSystemDirectoryA
GetThreadLocale
InitializeCriticalSection
IsBadCodePtr
LoadLibraryA
LoadLibraryW
MoveFileW
ResumeThread
SetCurrentDirectoryA
Sleep
WaitForSingleObject
WriteFile
lstrcpynA
user32
wsprintfA
CallWindowProcW
CascadeWindows
CreatePopupMenu
EnableMenuItem
GetActiveWindow
GetClassInfoExW
GetDesktopWindow
GetWindow
GetWindowThreadProcessId
InsertMenuW
IsChild
IsWindow
LoadCursorW
LoadStringW
PostMessageW
SendMessageW
SetActiveWindow
SetCursor
SetForegroundWindow
SetMenuDefaultItem
SetWindowPlacement
ShowWindow
TranslateAcceleratorW
UnregisterClassW
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ