Static task
static1
Behavioral task
behavioral1
Sample
28bdcb2df8e0426a306fddccbc27ce10N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28bdcb2df8e0426a306fddccbc27ce10N.exe
Resource
win10v2004-20240802-en
General
-
Target
28bdcb2df8e0426a306fddccbc27ce10N.exe
-
Size
52KB
-
MD5
28bdcb2df8e0426a306fddccbc27ce10
-
SHA1
a636c4a3b6d56e2af43bf954543b5b0cb51b143b
-
SHA256
d73fe00693bc70754fefddd6d5604e739bf7d5d96444ad05569bdcb744bd28d8
-
SHA512
6e7a1b7b80a4d537ceaf02a5beda5a20eea1e275f643161956db0b1e891047e545ce864b4a3a0c4cb218f9afb134f80d5d3aa338e2130c9b1e8ffdd69182d9ee
-
SSDEEP
768:vT70qT17vluzk08bHL6qc3JIFoGpPOuvfNthS3d0vdby0R+I2Q/1H5F/sFWMABvy:v/9ZR2ROWGpPOBdAvR+IvwWMAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28bdcb2df8e0426a306fddccbc27ce10N.exe
Files
-
28bdcb2df8e0426a306fddccbc27ce10N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ