Static task
static1
Behavioral task
behavioral1
Sample
29c996649196113584bb15b0b3bd74fa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29c996649196113584bb15b0b3bd74fa.exe
Resource
win10v2004-20231222-en
General
-
Target
29c996649196113584bb15b0b3bd74fa
-
Size
566KB
-
MD5
29c996649196113584bb15b0b3bd74fa
-
SHA1
b8f6d96a3ee487c26abf39816acf4f6b8b1a79d7
-
SHA256
c7788d5497aa994b97ffc10ef575162685552d5414ec47babc774de96ec4bf2f
-
SHA512
adaf1b1a9f79f983ccdc09a1e5a21613b0251d44c6387b81fa7c2b10abbd9d61d5315289b70eb84ee959ae3c05c9efca84395e8685fd288f1f1c6d0bc465df6e
-
SSDEEP
12288:NaV9kYwel2NjStbKW68kFrMX/Wfp9L0NpHEvCc6ZDVfTjTAx+j3RC:eielCjSTU6/ooNpHCC9hVfnTu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29c996649196113584bb15b0b3bd74fa
Files
-
29c996649196113584bb15b0b3bd74fa.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 559KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 1023B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linghun Size: 114B - Virtual size: 114B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linghun Size: 62B - Virtual size: 62B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE