Static task
static1
Behavioral task
behavioral1
Sample
528da9e9afaac0dd65de7febbdd70249.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
528da9e9afaac0dd65de7febbdd70249.exe
Resource
win10v2004-20231215-en
General
-
Target
528da9e9afaac0dd65de7febbdd70249
-
Size
610KB
-
MD5
528da9e9afaac0dd65de7febbdd70249
-
SHA1
c356fd388c3be16e95a99e059ab64e44381e1a43
-
SHA256
eeec3a9d8b642c0f9007d2500d8799962fc8faee2d2dd8da5a7ce90cddc18464
-
SHA512
4dcb510f6308888546f312713eb29195db76af927310f9aff1413c14959289ca6f182b90e93638dc01ea4d82893c795fa6586dd5d8bb1d116d23b3c9937d3f72
-
SSDEEP
6144:ShYsafa0idunTIPDan9xTy2VTk0xfdI3QPTYiEYKB6eTBh+:SWlfiunTIe9hTk0xlI30TYUHeT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 528da9e9afaac0dd65de7febbdd70249
Files
-
528da9e9afaac0dd65de7febbdd70249.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 352KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ