Static task
static1
Behavioral task
behavioral1
Sample
28d411ec9f701ef3ff672be31fab1a82a154c90290e33979b36bd29789daf6b9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
28d411ec9f701ef3ff672be31fab1a82a154c90290e33979b36bd29789daf6b9.exe
Resource
win10-20240221-en
General
-
Target
28d411ec9f701ef3ff672be31fab1a82a154c90290e33979b36bd29789daf6b9
-
Size
1.8MB
-
MD5
4fbb379faf60b95bc8187f9e05fe3ec7
-
SHA1
6ba311ae532033c5afc2c8a2fa0b6d435e882a51
-
SHA256
28d411ec9f701ef3ff672be31fab1a82a154c90290e33979b36bd29789daf6b9
-
SHA512
9c38817b64412d27bf2f2ba58bb207eaa88665a63f3d659139d5e686c12387969790fb33f6aafbe762191763b5f3a8a9dc894ac21381f48ce46a52b6b2d1f758
-
SSDEEP
24576:vHrHDqdPZRwyv6X6O2FsALnUBNujAWhvPY/ZssOcFnuVH0/uGwwfYvX+58TeSD0r:frHK3v6X6O2FrwBzWmsTAnuVzvuCaV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 28d411ec9f701ef3ff672be31fab1a82a154c90290e33979b36bd29789daf6b9
Files
-
28d411ec9f701ef3ff672be31fab1a82a154c90290e33979b36bd29789daf6b9.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
juxlndtk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
phevyyxy Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE