Static task
static1
Behavioral task
behavioral1
Sample
be928a4a28b3c99cef0a90c5fbf27801.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
be928a4a28b3c99cef0a90c5fbf27801.exe
Resource
win10v2004-20240226-en
General
-
Target
be928a4a28b3c99cef0a90c5fbf27801
-
Size
225KB
-
MD5
be928a4a28b3c99cef0a90c5fbf27801
-
SHA1
218fb549f1e50307fdc452d53f8029c131b02839
-
SHA256
44d067d754e86987458686400014687889813208315fe6be9507cb049bb48c03
-
SHA512
77324eaf58fb242594ddb5af43e0cd44d200d05009d65119992818bc91afe1a8506b13fd0022337c3f102d769e1c7fe42a891dea152bab59e03ec1b94b202ff9
-
SSDEEP
3072:Rap0hYxpL5VGR5wtOgCqjXBaBIWVkHGov5TDw1m2xxpQO6t2rOgbkjr3KGo4f9ee:RDMpu2gudAV7ov5TD4xt6tZNffEe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be928a4a28b3c99cef0a90c5fbf27801
Files
-
be928a4a28b3c99cef0a90c5fbf27801.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xur Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE