Static task
static1
Behavioral task
behavioral1
Sample
b28babbd9c7d1b7779b47225697212ce6d6f29f6b1eda4f088bb4a95ed32b9bd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b28babbd9c7d1b7779b47225697212ce6d6f29f6b1eda4f088bb4a95ed32b9bd.exe
Resource
win10v2004-20240412-en
General
-
Target
b28babbd9c7d1b7779b47225697212ce6d6f29f6b1eda4f088bb4a95ed32b9bd
-
Size
708KB
-
MD5
8b412ec2e34387deb31cd48602ba93cb
-
SHA1
9a3706e2d5ddbae49c89f005e8f8efc0c134b270
-
SHA256
b28babbd9c7d1b7779b47225697212ce6d6f29f6b1eda4f088bb4a95ed32b9bd
-
SHA512
5f100f90f25aacf7c4ff0706f4a5ac22c5256adbf5fb1c56d418d524e92427fa6bf6cec50e21c790dcf044781c349ee7fa7763444236773388d527a26c4a57e6
-
SSDEEP
12288:+LUDhF9WMqCnWormy3Gz8RbfOhJnGfWMMWUkfFQDfanD7VDO2Pk:IUl2MqTemy2rhJnGe+GDGD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b28babbd9c7d1b7779b47225697212ce6d6f29f6b1eda4f088bb4a95ed32b9bd
Files
-
b28babbd9c7d1b7779b47225697212ce6d6f29f6b1eda4f088bb4a95ed32b9bd.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 698KB - Virtual size: 697KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ