Behavioral task
behavioral1
Sample
29f1814d7b0ac8ed88ee58f37b8b19a9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
29f1814d7b0ac8ed88ee58f37b8b19a9.exe
Resource
win10v2004-20231215-en
General
-
Target
29f1814d7b0ac8ed88ee58f37b8b19a9
-
Size
242KB
-
MD5
29f1814d7b0ac8ed88ee58f37b8b19a9
-
SHA1
c3aa82171a698c792f3a4e3eb5869b5efcf78780
-
SHA256
85948affab73f38ba9eb00a67ab8e43ed94b8ccb2ede30a1a8702e343922adab
-
SHA512
e047d955ae71b774639a9f6932a460d46efc6fc0a9a327ce21c1a3981f62953ec217ded6f6b97e760dea5d6cebd49be604c1d8cecbb766991f674d78fc4aa41f
-
SSDEEP
6144:WxWT/g+q27Jn9rRuEtvivUiJaoLKhHuH:E2VFRhwvU0aoLKs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29f1814d7b0ac8ed88ee58f37b8b19a9
Files
-
29f1814d7b0ac8ed88ee58f37b8b19a9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE