Static task
static1
Behavioral task
behavioral1
Sample
428c7fda9703aba800484c4e2e417f0b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
428c7fda9703aba800484c4e2e417f0b.exe
Resource
win10v2004-20231215-en
General
-
Target
428c7fda9703aba800484c4e2e417f0b
-
Size
104KB
-
MD5
428c7fda9703aba800484c4e2e417f0b
-
SHA1
92544537a3fd0648859fd32081983166eb9818fc
-
SHA256
c9180e7e7f1d932df22114bbccb1a3312dd37c6fe8ad89a892b45465c62b2d47
-
SHA512
d3b48809069fa39a826d6014fc74d0ebfd7467ff6f02449d7f80dee38a3ead1d14f0cd04cc64af7592196fa2d046b5fd3dfbad07f99deca674152b5d42c5294c
-
SSDEEP
768:LfXXRz47cyS7sjQyVEHL41J15m38DdCsbOMhHxMwz0BUlIEflbhvhc0rpFrQPexR:L5z1zsjpaGd+KawgBUlHdbbc6FrQ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 428c7fda9703aba800484c4e2e417f0b
Files
-
428c7fda9703aba800484c4e2e417f0b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE