Static task
static1
Behavioral task
behavioral1
Sample
29b17d607b038a51caf4c84815b4b61ef25ac5d0754c7a181da1181e221eb513.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
29b17d607b038a51caf4c84815b4b61ef25ac5d0754c7a181da1181e221eb513.exe
Resource
win10v2004-20230915-en
General
-
Target
29b17d607b038a51caf4c84815b4b61ef25ac5d0754c7a181da1181e221eb513
-
Size
3.3MB
-
MD5
70b0cdbfa07eae7c19ca47b30fdd8c64
-
SHA1
f4c5f5130e12c706a644347a467b155ea78d96a3
-
SHA256
29b17d607b038a51caf4c84815b4b61ef25ac5d0754c7a181da1181e221eb513
-
SHA512
b890c8557050f60addc805d3c87cb8461aabb0c1b9568c63c370b96c698b5068a037ceba668948908b7e3e946c1c43bcd35f5d2230589ea9898b6f2831c8b954
-
SSDEEP
24576:I7Y2iRetuW/AalARK90GC/Oe3wPP7DXguQvm35P3Gsj8BnjZCy5TgN0KUNjGj:oRb0GClqHHjKFClmz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b17d607b038a51caf4c84815b4b61ef25ac5d0754c7a181da1181e221eb513
Files
-
29b17d607b038a51caf4c84815b4b61ef25ac5d0754c7a181da1181e221eb513.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE