Behavioral task
behavioral1
Sample
28ee8ffa0b84d43c23cc96da04cfb89f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28ee8ffa0b84d43c23cc96da04cfb89f.exe
Resource
win10v2004-20231215-en
General
-
Target
28ee8ffa0b84d43c23cc96da04cfb89f
-
Size
103KB
-
MD5
28ee8ffa0b84d43c23cc96da04cfb89f
-
SHA1
c90354de733c993ebbb0d1cd03412eacdc136955
-
SHA256
c381d671411b868bca4103f8a34ef3d917943ac57d92ca8d689b32e33512f04b
-
SHA512
1218ad41d0c9a4a9d8bfc6c5dc4268c0fcea879e27d683c0fee60b62faa21c9edf3b2be84fd8714e3de87c18a078c9e1046d2d2990c95a839994d41a48a4a283
-
SSDEEP
3072:sr3KcWmjRrzS0ulVhga9ZFt3g4a274LGcPupuED:/vl59Tt322MupXD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28ee8ffa0b84d43c23cc96da04cfb89f
Files
-
28ee8ffa0b84d43c23cc96da04cfb89f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE