Static task
static1
Behavioral task
behavioral1
Sample
528f9b3e423ef8d36e150b943274650d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
528f9b3e423ef8d36e150b943274650d.exe
Resource
win10v2004-20231215-en
General
-
Target
528f9b3e423ef8d36e150b943274650d
-
Size
395KB
-
MD5
528f9b3e423ef8d36e150b943274650d
-
SHA1
f513d1c31218f954d7c07a68cb88f8eedf513d84
-
SHA256
d4183cfc3ee9f57b73f91726d695aa398d78ef08d2c9d6efbc2018de49271b63
-
SHA512
bea61e667d4451c80af3a101e9de4b39abf0c4d6a6eeba66ed0ce2df058732d68389df4145a6404e664d17b737f60d1340b4255f093c64f62abe0bd92ac7e2af
-
SSDEEP
6144:9iYq0ixTmAcThAkZThMTMa01oXPvuuYe0tZ+RwPONXoRjDhIcp0fDlavx+W26nI4:9nix1c60yW+PvuuYEcYkrj68JEy1r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 528f9b3e423ef8d36e150b943274650d
Files
-
528f9b3e423ef8d36e150b943274650d.exe .pdf windows:4 windows x86 arch:x86 polyglot
65b6862e9898b195f4ef7a1685fd82dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
memset
comctl32
InitCommonControls
user32
MessageBoxA
shell32
ShellExecuteExA
ole32
CoInitialize
Sections
. Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE