Static task
static1
Behavioral task
behavioral1
Sample
28fdc1bd9a55fd751aa04d53a34504b9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
28fdc1bd9a55fd751aa04d53a34504b9.exe
Resource
win10v2004-20231215-en
General
-
Target
28fdc1bd9a55fd751aa04d53a34504b9
-
Size
1.4MB
-
MD5
28fdc1bd9a55fd751aa04d53a34504b9
-
SHA1
1ae904f7b30a33d4be783a66ada43f730286d6e6
-
SHA256
0cb5becf6a608acfc8636c13264b870b0c764f550c4075c1bce1f10787ba991d
-
SHA512
f37d43b29d01f5e1d616b9656fd92a2e028d8b9e5c1784c4c708e7a7608d44c0f2e83dc7042e05aa790af32b6e9bae486a1af9189652bccb0d9d4616ca7a3777
-
SSDEEP
24576:JQUs1SFzX5IjLSLKBByLFseOfIR61L5RdwKKoOL1+W9KCf7XAHsTfk/NZNfNNN6K:J3+38dRoL7d8joSPXmsjk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28fdc1bd9a55fd751aa04d53a34504b9
Files
-
28fdc1bd9a55fd751aa04d53a34504b9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1002KB - Virtual size: 1004KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 452KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE