Static task
static1
Behavioral task
behavioral1
Sample
29d103c8bc36fb1ba96aed6c5b74d6d9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
29d103c8bc36fb1ba96aed6c5b74d6d9.exe
Resource
win10v2004-20231215-en
General
-
Target
29d103c8bc36fb1ba96aed6c5b74d6d9
-
Size
381KB
-
MD5
29d103c8bc36fb1ba96aed6c5b74d6d9
-
SHA1
7695f280702232d83173fafd8c88e8f4289f6f6a
-
SHA256
7ca9cffc8aaa7d66b093f298714696e8a30e08a1670f8e516b9596598bcf3233
-
SHA512
23634f48c7657cdb999f2f89382f82dbddc6d70e6a1d242a5ff39e3e823892310414e257f487c14bb800540e1ee334421672e511c275c216e7f309cc17339b05
-
SSDEEP
6144:pxv6shezRNH0F2idZecnl20lHRxp3guoS8uZWm1uVsI2vTrTyhYIO6sT/HSR4NVq:6shZF3Z4mxxIfEWmXvWhYIO6sbyuNVBs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29d103c8bc36fb1ba96aed6c5b74d6d9
Files
-
29d103c8bc36fb1ba96aed6c5b74d6d9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 327KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE