Static task
static1
Behavioral task
behavioral1
Sample
28baad0c99627993c5b9597d10cccbfc650a634d9563500b7e54d793bffa1497N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28baad0c99627993c5b9597d10cccbfc650a634d9563500b7e54d793bffa1497N.exe
Resource
win10v2004-20241007-en
General
-
Target
28baad0c99627993c5b9597d10cccbfc650a634d9563500b7e54d793bffa1497N
-
Size
109KB
-
MD5
1c57672e748116fedfd1d428bbe29950
-
SHA1
beb09ee9ae7f4c77dc9713a41b5cc0217e23cb0e
-
SHA256
28baad0c99627993c5b9597d10cccbfc650a634d9563500b7e54d793bffa1497
-
SHA512
c9a56a5d791367a7e2d6db3f10cb76664bb5d0e6c042dd0f5cc0c8ef0cab53b8544cfddce83d04fb4a864ca1af33cfa8e6289a4395485fe95579274870e6be53
-
SSDEEP
1536:jm6HJ0s5WF/QQHCCrkY5fXLmBJ7qTfqf+evPm2fgFyO:K6HJ0s5WF/nHdrkj7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28baad0c99627993c5b9597d10cccbfc650a634d9563500b7e54d793bffa1497N
Files
-
28baad0c99627993c5b9597d10cccbfc650a634d9563500b7e54d793bffa1497N.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ