Static task
static1
Behavioral task
behavioral1
Sample
29faca601c8310ad4473a605f8868b36.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
29faca601c8310ad4473a605f8868b36.exe
Resource
win10v2004-20231215-en
General
-
Target
29faca601c8310ad4473a605f8868b36
-
Size
2.8MB
-
MD5
29faca601c8310ad4473a605f8868b36
-
SHA1
1c47d7cdbd474f8dbdb033e63e107c5b70f82206
-
SHA256
f38675d02349942a9ea1204728033ccdd50c8c1eab3c85a91c14c70a33267bd1
-
SHA512
002ed7104b11a808a214579a01e27a7649f59c6ca6724bc88bbdb27ebfaf3be4f1e3696a26b1575b7e74a836c1c49a0046c6804eea34bc760a6d45e2b0475d20
-
SSDEEP
49152:bLbMG058ferQZbd2ohi8ferQZbd2e8a8nq:SfrQZerQZ3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29faca601c8310ad4473a605f8868b36 -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
29faca601c8310ad4473a605f8868b36.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ