Static task
static1
Behavioral task
behavioral1
Sample
29e328fb36ddc4221418696019737cf5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29e328fb36ddc4221418696019737cf5.exe
Resource
win10v2004-20231215-en
General
-
Target
29e328fb36ddc4221418696019737cf5
-
Size
78KB
-
MD5
29e328fb36ddc4221418696019737cf5
-
SHA1
0e0c47f3b6b592e15174d08b9db157d4fb59f874
-
SHA256
e1f6d4f2fa77aa5b073e6632ba7ab57137b78c832903ce712065dfb2fc913760
-
SHA512
bbb5331921b52c40addbdc566b8f67fbf19d34c70b6db75c503b258e3d7806309f332fa63996df403bb2da9c42bfe262f9adc6c0a736af89b3f84e1123aa6116
-
SSDEEP
1536:QxHSl/f9xk/v/pj9w08Mm92+kL0Lr4tERvXZkqfaiOhBLq4P5:SyFk/npj9wyxyLrWAfZ3zOTLhP5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29e328fb36ddc4221418696019737cf5
Files
-
29e328fb36ddc4221418696019737cf5.exe windows:4 windows x86 arch:x86
99b3efd38ae1009543e5455249697021
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextExtentExPointA
SetICMProfileA
SetWindowOrgEx
GetClipRgn
DeleteColorSpace
ArcTo
kernel32
lstrcpyW
SetConsoleTitleA
GetFileSizeEx
SwitchToThread
SetCurrentDirectoryA
GetModuleHandleW
ExitProcess
AddAtomA
VirtualAlloc
Module32FirstW
GetCommandLineW
GlobalMemoryStatusEx
GetCurrentProcessId
CloseHandle
iashlpr
ShutdownIas
MemFreeIas
InitializeIas
FreeAttributes
MemAllocIas
AllocateAttributes
DoRequest
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CRT Size: 5KB - Virtual size: 913KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 3.9MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 1024B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ