Static task
static1
Behavioral task
behavioral1
Sample
28e93956f857e6920f5bf86a8dded961.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28e93956f857e6920f5bf86a8dded961.exe
Resource
win10v2004-20231222-en
General
-
Target
28e93956f857e6920f5bf86a8dded961
-
Size
327KB
-
MD5
28e93956f857e6920f5bf86a8dded961
-
SHA1
f6853d275d776bf75e5c2f9dc24a716ccfcf9d5a
-
SHA256
d76e74f5831ccdcd0c36840d59a6f8c01232e7801d9f17bc33664b6f0c733f17
-
SHA512
0f486aa08ee86c893806bb4d0ebef219d63ae9bf7f5c5fad089191a2ed9ddb3f01cacf719478ecd0ed6b1181f5746db9917b29dae3c70ba5d8b6a92f5bd83338
-
SSDEEP
6144:4pS1cNwPLvoqg0R2VhPefm0ToHAY/rBCCtY09H7b3N7kmiokIU6c/R:4pS1c2obY7Mz9H7Rkmfk76mR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28e93956f857e6920f5bf86a8dded961
Files
-
28e93956f857e6920f5bf86a8dded961.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 270KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE