Static task
static1
Behavioral task
behavioral1
Sample
29cf8316429b8f7be5c0c4eff420ad28.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29cf8316429b8f7be5c0c4eff420ad28.exe
Resource
win10v2004-20231222-en
General
-
Target
29cf8316429b8f7be5c0c4eff420ad28
-
Size
88KB
-
MD5
29cf8316429b8f7be5c0c4eff420ad28
-
SHA1
9b3205ba5f05dd0e080786002b46822104813c00
-
SHA256
26b5282f0dc4300d6b30df1f896902c75036c4d94d9897a02e560afb19bc4c9e
-
SHA512
aadb5117c4f34c354b473c1cfeadb36dd007829fe51f4442de6c942b0f5276139b1370e5a9415989b6d17546cc6daee58210f71922e24bce6adb772789174ddc
-
SSDEEP
1536:qYXVOyYKqJdYxXimwLZXZtn5KaZ0BQa3LEjWzd43k3Zer:r16YxPqZX5KhKa34Czd0ker
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29cf8316429b8f7be5c0c4eff420ad28
Files
-
29cf8316429b8f7be5c0c4eff420ad28.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.````` Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.````` Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.```` Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE