Static task
static1
Behavioral task
behavioral1
Sample
29fb83b5393a5708da7c1ab4e3b83749.exe
Resource
win7-20231215-en
General
-
Target
29fb83b5393a5708da7c1ab4e3b83749
-
Size
106KB
-
MD5
29fb83b5393a5708da7c1ab4e3b83749
-
SHA1
57546808dae0583599a176858871de34a2a28887
-
SHA256
e107460cd8f9d64d1a766c2133d47fee7d2792e7782a12f2516cb16f3792511e
-
SHA512
2c63a16cfbef4f982be38ffe0a3a2fbe11969f96b2fac1676808aeb96a926e2fd7edcece50b3d39c66672e9361134fa5a31c200561c1d3642a2b0d77964b0be9
-
SSDEEP
1536:iCdsvPuESFclXdbKzi9QmO9HFDYyJVo0zzmtbLkn:iRvPouKrr9YyrNvKkn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29fb83b5393a5708da7c1ab4e3b83749
Files
-
29fb83b5393a5708da7c1ab4e3b83749.exe windows:4 windows x86 arch:x86
416fd91764382226a6b52838fc7d2cf0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WaitForSingleObjectEx
CreateProcessA
GetStartupInfoW
LoadLibraryExA
WaitForSingleObject
CreateFileA
DeviceIoControl
VirtualProtectEx
CreateProcessA
GetSystemTimeAsFileTime
GetProcAddress
LoadLibraryA
VirtualProtect
GlobalWire
WaitForSingleObject
WriteProcessMemory
DeviceIoControl
WriteProcessMemory
WriteProcessMemory
TerminateProcess
GetStartupInfoW
VirtualProtect
CreateFileA
LoadLibraryA
wlanapi
WlanCloseHandle
WlanSetInterface
WlanCloseHandle
WlanOpenHandle
WlanEnumInterfaces
WlanSetInterface
WlanSetInterface
WlanOpenHandle
WlanCloseHandle
WlanSetInterface
WlanSetProfileEapXmlUserData
WlanOpenHandle
WlanOpenHandle
WlanEnumInterfaces
WlanEnumInterfaces
WlanOpenHandle
WlanEnumInterfaces
WlanCloseHandle
WlanEnumInterfaces
WlanEnumInterfaces
Sections
.text Size: 63KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ