Static task
static1
Behavioral task
behavioral1
Sample
28ea6acc754f9f32882e4128e306b9ab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28ea6acc754f9f32882e4128e306b9ab.exe
Resource
win10v2004-20231215-en
General
-
Target
28ea6acc754f9f32882e4128e306b9ab
-
Size
152KB
-
MD5
28ea6acc754f9f32882e4128e306b9ab
-
SHA1
109dd6961867fbbb8c331e871404c9c8ce371128
-
SHA256
d9e2ae31ed0165a5875446e7e494e4a80c64e9922cb70495ae6488f7244a4518
-
SHA512
858d38f9818cd2ba0c82855926336bc9bb05889f833b4b0ce47cdc676c4cd2937f64892063fb9eb7ee47598c39fa6e7b9241e8bcb725266b1f4982d39f76ccc0
-
SSDEEP
3072:8YrxkMF6TAYleLpt497JBZkmWG0Fkqz6adtxoW2gVTjX8KKDQp:8Y226TZeMAXFkPIVT3KDs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28ea6acc754f9f32882e4128e306b9ab
Files
-
28ea6acc754f9f32882e4128e306b9ab.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ