Behavioral task
behavioral1
Sample
29bccd556df49106269c4ae6b0520214.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
29bccd556df49106269c4ae6b0520214.exe
Resource
win10v2004-20231201-en
General
-
Target
29bccd556df49106269c4ae6b0520214
-
Size
133KB
-
MD5
29bccd556df49106269c4ae6b0520214
-
SHA1
5eb979af8dcdc35f9fb434e4f1174a9701b04eda
-
SHA256
59c4dca8b75834e2423ab2a90e7d06fbe911e2160b135608346bdb10f8770bfa
-
SHA512
11735ce16811c4f7904f615ed161ab8d5f40a6949e33889834f00e5edeac9bda6705d66f3b875bcd50591d46c18f2b62a78601509586baa81209140bc95ab167
-
SSDEEP
3072:KFkZbks4eDLlcDQb3wA+I0Ip+6/q54UIyZYUonJvwUEQ:KmFksl/ou3uly+6y54UIyZRauQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29bccd556df49106269c4ae6b0520214
Files
-
29bccd556df49106269c4ae6b0520214.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE