Static task
static1
Behavioral task
behavioral1
Sample
29ab61bc232e26e426a8b665bb43e7d5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
29ab61bc232e26e426a8b665bb43e7d5.exe
Resource
win10v2004-20231215-en
General
-
Target
29ab61bc232e26e426a8b665bb43e7d5
-
Size
123KB
-
MD5
29ab61bc232e26e426a8b665bb43e7d5
-
SHA1
6d7729e1ecb90ea1443f1f4a50d8291ee91dc019
-
SHA256
e1353f087d9bba574cfa280a33936ffcd9a548045b837c601a44fcef0530ca3a
-
SHA512
e7adf84571466e639d088c5cbd027bc4fe4b4d58bfdad2e9d5da92974accf3fe95e7f7a16a972a8c4cafcfe4ea6d941a80aac2b5d4267fd0779332ce76e0c68e
-
SSDEEP
3072:MhYJHED1YuXAbQ7mqg3WUMn1215CJClXy03Fh5dL314UGyWrKQA:NkBeQovMn12pXyehTL314UGhc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29ab61bc232e26e426a8b665bb43e7d5
Files
-
29ab61bc232e26e426a8b665bb43e7d5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 711B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE