Behavioral task
behavioral1
Sample
29d508d35c01bb3ee3f68c4bc809b4f4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29d508d35c01bb3ee3f68c4bc809b4f4.exe
Resource
win10v2004-20231222-en
General
-
Target
29d508d35c01bb3ee3f68c4bc809b4f4
-
Size
8KB
-
MD5
29d508d35c01bb3ee3f68c4bc809b4f4
-
SHA1
6311451cf15dd243c392bc48d5710e4ad7eb4b9a
-
SHA256
a1d009cd22065bf5582920e7b71fa30b35959d09dc13721803b5045ba43da5aa
-
SHA512
397c9cad36f0325f48e4a20ac805090dd08cc3026e6342fd540f4316a906d574097723f85c24f2dab28cb1f0e42786fcae60d6940052da4208e733a2a6fcc0be
-
SSDEEP
192:t5XJli7IFHH2pO9zHtDjvIFaNJhLkwcud2DH9VwGfcthxQUvvR:tKIFn2WN38aNJawcudoD7UnaUR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29d508d35c01bb3ee3f68c4bc809b4f4
Files
-
29d508d35c01bb3ee3f68c4bc809b4f4.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE