Static task
static1
Behavioral task
behavioral1
Sample
029aee446853077894ae7eb7464a8a60.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
029aee446853077894ae7eb7464a8a60.exe
Resource
win10v2004-20231215-en
General
-
Target
029aee446853077894ae7eb7464a8a60
-
Size
239KB
-
MD5
029aee446853077894ae7eb7464a8a60
-
SHA1
059af4d2a45b262b427ca0c52bb99edd7e1f25df
-
SHA256
73e35dbd47e6d5d5323f906b5bccec29d393beb5fb3f65e628e84bf8a8f6942f
-
SHA512
44cfa590f1c8dfd471857ad8f9581013dcbb45120c7bfb859c2ee68b39050d0e11fb70b90372d0ee633f27a38c85ffee470de1c3125b35f1855c41c482c92068
-
SSDEEP
6144:xUwYJz99ePTUWbUgvf+sGWOWCKyduj6yA:xUwYNPePTUV8XtLCKyu6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 029aee446853077894ae7eb7464a8a60
Files
-
029aee446853077894ae7eb7464a8a60.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 119KB - Virtual size: 250KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 22KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE