Static task
static1
Behavioral task
behavioral1
Sample
29e0ab09956c4bacde43d28a6181f280_exe32_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
29e0ab09956c4bacde43d28a6181f280_exe32_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
29e0ab09956c4bacde43d28a6181f280_exe32_JC.exe
-
Size
208KB
-
MD5
29e0ab09956c4bacde43d28a6181f280
-
SHA1
fe85fdfcc99a50c8719dd45a73c03a03e1adddad
-
SHA256
e15f4a9b5f220e3cb7041f33f1926a8afcfab3375ac33343906646ce10096c33
-
SHA512
7cc025c5b687af9e9f430017c21003b3cb4c1a34ddb44c7f2fa66260aec14cbe3f79fb32b3e64c308dd54a6c35b6ae0be8b258c3ce6ca578442924e2e32a33d2
-
SSDEEP
768:BpMeEXxR3F8UNvrJb0PztsYDpVLGc3HZWok/6pSyrkIyvrT/1H5JGXdnh:BqzXF8CvrJ4PBhDP35R/mhzE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29e0ab09956c4bacde43d28a6181f280_exe32_JC.exe
Files
-
29e0ab09956c4bacde43d28a6181f280_exe32_JC.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfcd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE