Static task
static1
Behavioral task
behavioral1
Sample
29e78e364015f126017fad95b7e72b3f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
29e78e364015f126017fad95b7e72b3f.exe
Resource
win10v2004-20231222-en
General
-
Target
29e78e364015f126017fad95b7e72b3f
-
Size
142KB
-
MD5
29e78e364015f126017fad95b7e72b3f
-
SHA1
ebfb72421d30f32940799c4540ff7a02ee6bef59
-
SHA256
b797197d2197cb6b2a192ec36566fbe1ff83aa2849b323ef32588f57c51b45cd
-
SHA512
7e992eff6df8da3d4dbc87c70ed1d2dd40d9daf00f86e5ae275d6dcb19b96bcc9728e409e2273fdc58ade801e13b33436786c4f28db4fb072acdbdbd3ae0045e
-
SSDEEP
3072:VcxyAdisXFt/DYe420x18Px3XJn2Ne8O/01C7XbpTFrB2Hjh:ahlDYg0HmtBIe8OcCzbNFrB2D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29e78e364015f126017fad95b7e72b3f
Files
-
29e78e364015f126017fad95b7e72b3f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 136KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE