Static task
static1
Behavioral task
behavioral1
Sample
29f98ddb438c89f391b109763b034c2f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29f98ddb438c89f391b109763b034c2f.exe
Resource
win10v2004-20231215-en
General
-
Target
29f98ddb438c89f391b109763b034c2f
-
Size
1.2MB
-
MD5
29f98ddb438c89f391b109763b034c2f
-
SHA1
308f58637ac7f49df0aa5e0f49bb4bcbca3a67d7
-
SHA256
6e003469ed2dc5470066bb73e633e8fff78edcc757819ab1cf8461615689f4a7
-
SHA512
f4e2556682cd7935d4240cdb4d0ae081fa0698343d32a2d43c3d7253d779da77b46a36e572e21c55ee3ae8e021ed4d1b546cdb091d1104622c449ee5f0a92132
-
SSDEEP
24576:dTQmoFwE3M+HoSPa9RIA24/W9DTH5pkOOdpzxUjbIz37QJs+TAeI/:dEoOfH5PYRIAZ/W9HHFOdptUjbITCs+M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29f98ddb438c89f391b109763b034c2f
Files
-
29f98ddb438c89f391b109763b034c2f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 325KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 792KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE