Static task
static1
Behavioral task
behavioral1
Sample
528e0aca0fa7cdcede30420876b4f631.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
528e0aca0fa7cdcede30420876b4f631.exe
Resource
win10v2004-20231215-en
General
-
Target
528e0aca0fa7cdcede30420876b4f631
-
Size
512KB
-
MD5
528e0aca0fa7cdcede30420876b4f631
-
SHA1
a52872e92967b7fd941bc4872a87e3c9ae0393f7
-
SHA256
36091ece9801f488dbc1e72a2005ce78aa6a3af2c9ae4224c409b83138023e4a
-
SHA512
ef8bded1e9a8f258b4df6bf03adccaf18ef6c49d4437e8d09d71827c106c07246271552696923b39fd3f669d49bc8dc6436febec6e2ea7492a2a3d3a7ec8a691
-
SSDEEP
12288:VLc93prj3kyBVWPQar4wqFb6yTlu3MoQEYF:V8ZrjUGVWoc0JhkcIYF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 528e0aca0fa7cdcede30420876b4f631
Files
-
528e0aca0fa7cdcede30420876b4f631.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 806KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 346B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE