Behavioral task
behavioral1
Sample
28d17b63c346fe5854e5328830c82e70N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
28d17b63c346fe5854e5328830c82e70N.exe
Resource
win10v2004-20240802-en
General
-
Target
28d17b63c346fe5854e5328830c82e70N.exe
-
Size
87KB
-
MD5
28d17b63c346fe5854e5328830c82e70
-
SHA1
0783449bb57cbe21ff5e0d38cd3c504b9c86ea4c
-
SHA256
863e87cedbe7ed9de29edd7c8b07c374de8aab1b030397d6b4cae651b8b1d864
-
SHA512
241ce1b709b2d3ce3adfe2b047028fe9012ad92e39cd65c775b7cfe2584d27f2ed88f12bec54f69bf27c147a618f92fe56f812f4b51da737d7e1464de0efb5db
-
SSDEEP
768:3Og167GTCGTL9tCqwhX52pwTu5gV62i9wb4CWYLyAKfPXvByNGOLDd5FBEewN4WX:x0Y9WV32pau5gV62++Kf/vw/d5Uh4Ax
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28d17b63c346fe5854e5328830c82e70N.exe
Files
-
28d17b63c346fe5854e5328830c82e70N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE