Static task
static1
Behavioral task
behavioral1
Sample
28fb0e0cdcc3870ffa56a3fee673e761.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
28fb0e0cdcc3870ffa56a3fee673e761.exe
Resource
win10v2004-20231215-en
General
-
Target
28fb0e0cdcc3870ffa56a3fee673e761
-
Size
48KB
-
MD5
28fb0e0cdcc3870ffa56a3fee673e761
-
SHA1
99103f8a73d9fca13733af6f6b6557e336cb49fb
-
SHA256
724e5b6316429f731d972b274d4bcc6e6b0b3b2faf22a27f6a09734f8f79e435
-
SHA512
3870be4197b4880263b025f5f06d34b98d6e569c1c56e09d6f03226ad3c1bc15d85e823475a5d0899e273c524d5273f27360c2de29382b6c41e3b264fa806dec
-
SSDEEP
768:vEq2xkqmHVfVFh2caA1homPSa+hBucQ/06t:vTHNDaAgmPSaiYt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28fb0e0cdcc3870ffa56a3fee673e761
Files
-
28fb0e0cdcc3870ffa56a3fee673e761.exe windows:4 windows x86 arch:x86
22ca39a88f92cefc2a38397eed76927c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
WinExec
GetTempPathA
CompareStringW
CompareStringA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetLastError
SetFilePointer
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetEnvironmentVariableA
wininet
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE