Static task
static1
Behavioral task
behavioral1
Sample
29a6d7004c8a505a75e4c11f64fffc82.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29a6d7004c8a505a75e4c11f64fffc82.exe
Resource
win10v2004-20231215-en
General
-
Target
29a6d7004c8a505a75e4c11f64fffc82
-
Size
112KB
-
MD5
29a6d7004c8a505a75e4c11f64fffc82
-
SHA1
c686a7f8b27d60d13de3a7fd9aee6d15a432cd19
-
SHA256
0eeeff48fb1b13e0791abd4bde9be67cf70a47957b86ff7b35b05ba1c4292e25
-
SHA512
6f178f9c84235368377ac1f42b891e5df151e6d8b3c2608a465494481d721c3da487941c2d86260fd41e5bf3ff193b15c8be123adbbf6b8488caf7e2671f1bf4
-
SSDEEP
1536:ZGaq93mQy5PV4MSu4M3vfAlA89mWMMF4pzYU2qIUZ6kd+l6:Z5MaVVnLA0WLM0Uvh6kd+l6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29a6d7004c8a505a75e4c11f64fffc82
Files
-
29a6d7004c8a505a75e4c11f64fffc82.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 80KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 776B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ