Behavioral task
behavioral1
Sample
28ca2a3476ddc12bb2d499b6ff64c1524bc2e99d04d767376a9b826a81fb0850.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28ca2a3476ddc12bb2d499b6ff64c1524bc2e99d04d767376a9b826a81fb0850.exe
Resource
win10v2004-20241007-en
General
-
Target
28ca2a3476ddc12bb2d499b6ff64c1524bc2e99d04d767376a9b826a81fb0850
-
Size
3.1MB
-
MD5
d1828925bc7e45fd17ceef5576e20e51
-
SHA1
a3f324bb688cb1e62f282b5875a8e713cf11bc1d
-
SHA256
28ca2a3476ddc12bb2d499b6ff64c1524bc2e99d04d767376a9b826a81fb0850
-
SHA512
ee03e720c56bb3e21ae0227213c6f19d0cbfca002ff7cad4b6f6f14f1505eaeb7af0e251c245c64307c7004369b98e19850daca18d8c7667ba4a8823e281ace7
-
SSDEEP
98304:lbJddHSzfIcnoqQw2RddRfDviS8kNqluLEdVUrQuwi1oL:b7+fhn92RRfDiS8kNqlt/UEulGL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28ca2a3476ddc12bb2d499b6ff64c1524bc2e99d04d767376a9b826a81fb0850
Files
-
28ca2a3476ddc12bb2d499b6ff64c1524bc2e99d04d767376a9b826a81fb0850.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE