Static task
static1
Behavioral task
behavioral1
Sample
28700ee52d6c5251e2c75bff6d6a8cbf63999aeafeacdc621b87945b6d04a637.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28700ee52d6c5251e2c75bff6d6a8cbf63999aeafeacdc621b87945b6d04a637.exe
Resource
win10v2004-20241007-en
General
-
Target
28700ee52d6c5251e2c75bff6d6a8cbf63999aeafeacdc621b87945b6d04a637
-
Size
276KB
-
MD5
fe559e673d14f05af4fd51191ffc31fb
-
SHA1
ff79f669f4dd143ef33094d087e6c289ef43a588
-
SHA256
28700ee52d6c5251e2c75bff6d6a8cbf63999aeafeacdc621b87945b6d04a637
-
SHA512
c7bfdebc6c5adea21387d3219a52b4b59c225b518a97bafbcad73df7c327cc03321b6a33d8b19a5b461cbc00ef43c14e3429c913b5ca49543d5e4156a79ecee9
-
SSDEEP
6144:+8o6mYd/c76QjwExcJHg2r2Nh/qoWV0gh4bmIfQYh3912rBY9wd:+81mm/OwExcJHZr2Nh/vWV0xNfd391y7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28700ee52d6c5251e2c75bff6d6a8cbf63999aeafeacdc621b87945b6d04a637
Files
-
28700ee52d6c5251e2c75bff6d6a8cbf63999aeafeacdc621b87945b6d04a637.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 272KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ