Static task
static1
Behavioral task
behavioral1
Sample
28104978240834467ce5ea814a490dd0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
28104978240834467ce5ea814a490dd0N.exe
Resource
win10v2004-20240709-en
General
-
Target
28104978240834467ce5ea814a490dd0N.exe
-
Size
401KB
-
MD5
28104978240834467ce5ea814a490dd0
-
SHA1
1979aa745a5aa56526f6619161f2f5cb674a94b1
-
SHA256
4925636aed12d8dcb57e224bee8182c9c7e162b16f43cb75ca50c6656c4cb520
-
SHA512
05c06b49625616f05f6448f8a821f7088860343a0a64957fcfce1de6fc803331c9e389f8624d8e9e47731e95137cd99e1df67ff81181ca99534390ca43fd0366
-
SSDEEP
6144:it03a62hzpSNxV2qcJVLNyTiY6wDyIJ2r/bDX:Os52hzpHq8eTi30yIQrDDX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28104978240834467ce5ea814a490dd0N.exe
Files
-
28104978240834467ce5ea814a490dd0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE