Static task
static1
Behavioral task
behavioral1
Sample
29bf4256dce5003b51b6e8d11f035226.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29bf4256dce5003b51b6e8d11f035226.exe
Resource
win10v2004-20231215-en
General
-
Target
29bf4256dce5003b51b6e8d11f035226
-
Size
325KB
-
MD5
29bf4256dce5003b51b6e8d11f035226
-
SHA1
1450bcef2640d070e9b6c614ac3a3df81b4f8d0e
-
SHA256
ea0dd1f91d961bdf9f2ecac7ba5f6808394dc0fb822f507f10f856fd7d4e37b7
-
SHA512
cfb88107550b1c9687a2a7e3b6e3be46de4026fb72d721f8d54a3f94949591fb4a1de9abf5f18ccee93e25499f594c9d7c445751a5489d53ba6d180d0f8712cc
-
SSDEEP
6144:fZcYLLuJOhhxqD+ABfY0fLTxLJCuA7P0zSLj9z9WS3t1cR2fok3Xu:x9yJOJqD+ABw0fHxLs7PDn9nw2fNXu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29bf4256dce5003b51b6e8d11f035226
Files
-
29bf4256dce5003b51b6e8d11f035226.exe windows:4 windows x86 arch:x86
e960f97c3935559114564846b971132d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
GetEnvironmentVariableA
Sleep
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 269KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE