Behavioral task
behavioral1
Sample
29cb6c5f82b7d166c3520d45e7927bd41878dbcd438c1aa2af53d09a83c33a6b.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
29cb6c5f82b7d166c3520d45e7927bd41878dbcd438c1aa2af53d09a83c33a6b.exe
Resource
win10v2004-20231023-en
General
-
Target
29cb6c5f82b7d166c3520d45e7927bd41878dbcd438c1aa2af53d09a83c33a6b
-
Size
10.5MB
-
MD5
63dba77086254e4d32768f91698557a4
-
SHA1
39aa957082d182cd35b10d4adc5cbeaae3603f16
-
SHA256
29cb6c5f82b7d166c3520d45e7927bd41878dbcd438c1aa2af53d09a83c33a6b
-
SHA512
1a07e721e65a5eef70605b330beb7353d3af7c25a788f4c7c1524931906d35c1e67f1713111ea0e44643ee2d265dac9f725c4d5895860fa1acb54285f4b1c481
-
SSDEEP
196608:msUCzdBxWhM27b4jW5svDD335bnNIYSagzx37CLNXID4JM7Zqn5VLxFap4V:mw3xWwjjvDD3vIYSNzxLWNHMtwG4V
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29cb6c5f82b7d166c3520d45e7927bd41878dbcd438c1aa2af53d09a83c33a6b
Files
-
29cb6c5f82b7d166c3520d45e7927bd41878dbcd438c1aa2af53d09a83c33a6b.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10.5MB - Virtual size: 10.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE