Behavioral task
behavioral1
Sample
29efa85fb5e9b59ef30afc5149f1ee2c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29efa85fb5e9b59ef30afc5149f1ee2c.exe
Resource
win10v2004-20231215-en
General
-
Target
29efa85fb5e9b59ef30afc5149f1ee2c
-
Size
557KB
-
MD5
29efa85fb5e9b59ef30afc5149f1ee2c
-
SHA1
55c84fc2d379985d1adc93c4dd0e6f861da4f683
-
SHA256
e01df33c281ce0461459ebdf237bc70b89501170c4ae5a39f88747adecad8d2d
-
SHA512
6125780ddc26a800ef6c4377f46bee4c7f01f3f958b2087d14985ebdf31f0bb987b5730395f30ee2851d0cc24d12033b7ef8cae4c133ae89e3897ad3521e9b85
-
SSDEEP
12288:AjkArEN249AyE/rbaMct4bO2/VkX8khsmZDMtEF6:7FE//Tct4bOsuXvhB+ts6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29efa85fb5e9b59ef30afc5149f1ee2c
Files
-
29efa85fb5e9b59ef30afc5149f1ee2c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 464KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ZUPX1 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE