Static task
static1
Behavioral task
behavioral1
Sample
29cdfc1e3c25b3b317d96d76e1ac63c6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29cdfc1e3c25b3b317d96d76e1ac63c6.exe
Resource
win10v2004-20231215-en
General
-
Target
29cdfc1e3c25b3b317d96d76e1ac63c6
-
Size
281KB
-
MD5
29cdfc1e3c25b3b317d96d76e1ac63c6
-
SHA1
edc5b99ca9c9290dce74f9c7ccacdd522e9bc63e
-
SHA256
203a22bf2b04caadad7ce2be62cebfe6685d41eb0369e094488785042bc270cc
-
SHA512
b2136d5502499642f340d399a0813624b071a68c2fb6d730dba6dc135747354b1fcf9921b86f19453b7d3b0d5f0ea4dd63b300e3297a193f85fbea59714631c3
-
SSDEEP
6144:7PfDHTR10CwzXOu2G03AQW8e3f+kU5I5grNFPSWTbBUqX7jka:rDzR1oAG150IuJFPSWVUqrAa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29cdfc1e3c25b3b317d96d76e1ac63c6
Files
-
29cdfc1e3c25b3b317d96d76e1ac63c6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.wtq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE