Static task
static1
Behavioral task
behavioral1
Sample
428bc095cbece391fd40cd4b45d7ff11.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
428bc095cbece391fd40cd4b45d7ff11.exe
Resource
win10v2004-20231222-en
General
-
Target
428bc095cbece391fd40cd4b45d7ff11
-
Size
421KB
-
MD5
428bc095cbece391fd40cd4b45d7ff11
-
SHA1
f751b733f56ae0d26679211588963f1521a23b6e
-
SHA256
bb159eeaa669b20350afd7137dd0f6e49ab7fc8a119225a27581158024cd97b0
-
SHA512
2ef53e1df94c125a522d5174b2f01cb5583912c081e22938e08279708d85857113d5044ef3d925fbc55920c7a13693b9f7107d86faa4be4960aede03b0dfa8d8
-
SSDEEP
6144:nttt60ASTRxIXnkixpOv5KF5nThYMBTRHROIr4Kdyj7XKU/4QvTyaJFvlP1jgTN:g09V/ai0FNHVI7XvVjk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 428bc095cbece391fd40cd4b45d7ff11
Files
-
428bc095cbece391fd40cd4b45d7ff11.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ