Static task
static1
Behavioral task
behavioral1
Sample
29ea091b6592519fc4502d2988b5f397.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29ea091b6592519fc4502d2988b5f397.exe
Resource
win10v2004-20231215-en
General
-
Target
29ea091b6592519fc4502d2988b5f397
-
Size
116KB
-
MD5
29ea091b6592519fc4502d2988b5f397
-
SHA1
645ca0cf875fe121e6ed994303cc8f7811c646c8
-
SHA256
37d8b54f8bc3d2403e778aa8a95bd26f4043cfa03202a60ebbb6a9b490bc72c8
-
SHA512
f416f1f36a7de01a6e0d72599b93173c32561f9006f25b60d70d4c26ee65c47526110fcb394d98be7a9d230e809cc87e81479ecba018fc25fe5a750ab57273da
-
SSDEEP
3072:J3EP0K+xFN+WtOR2x5WoBzbdkyo/O4hoAY2V:asKCN+WA0x5WqEO41V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29ea091b6592519fc4502d2988b5f397
Files
-
29ea091b6592519fc4502d2988b5f397.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE