Static task
static1
Behavioral task
behavioral1
Sample
29ee969a3ab203bc7bcf9085820b9bf813bbce08da3cb1bc40d394901a8c9c07.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
29ee969a3ab203bc7bcf9085820b9bf813bbce08da3cb1bc40d394901a8c9c07.exe
Resource
win10v2004-20230915-en
General
-
Target
29ee969a3ab203bc7bcf9085820b9bf813bbce08da3cb1bc40d394901a8c9c07
-
Size
14.2MB
-
MD5
c056624dcf129b37e1257377d5f6000d
-
SHA1
e46686775ea4e4ca66e7e4ad2f569826a95ce298
-
SHA256
29ee969a3ab203bc7bcf9085820b9bf813bbce08da3cb1bc40d394901a8c9c07
-
SHA512
467374b8b38afcb2cf36822c959c6c481f9891221b8555a3cb4ae0a8829c5ecede3886251efd16932899a2f21e44c95e7dffe88cdaa09bfec17a03320a12a006
-
SSDEEP
393216:OFJdDFM3eIfrhyln57Mw2U2n06je/E/1X52Ha0zWtQgah:yYOhn5v2Uq0auELmYQBh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29ee969a3ab203bc7bcf9085820b9bf813bbce08da3cb1bc40d394901a8c9c07
Files
-
29ee969a3ab203bc7bcf9085820b9bf813bbce08da3cb1bc40d394901a8c9c07.exe windows:6 windows x86
c1a2e16f25314b4dee51bb8d6d5678d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
user32
TrackPopupMenu
gdi32
CreatePatternBrush
msimg32
AlphaBlend
winspool.drv
ClosePrinter
advapi32
RegQueryValueW
shell32
SHBrowseForFolderW
comctl32
InitCommonControlsEx
shlwapi
StrCmpW
uxtheme
DrawThemeBackground
ole32
CoLockObjectExternal
oleaut32
OleCreateFontIndirect
oledlg
OleUIBusyW
gdiplus
GdipDrawImageRectI
ws2_32
inet_ntoa
oleacc
AccessibleObjectFromWindow
imm32
ImmGetContext
winmm
PlaySoundW
Sections
.text Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 535KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 2.4MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 11KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 448KB - Virtual size: 448KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ