Static task
static1
Behavioral task
behavioral1
Sample
29b54a420b48e8024a9267a6c6ae35c7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29b54a420b48e8024a9267a6c6ae35c7.exe
Resource
win10v2004-20231222-en
General
-
Target
29b54a420b48e8024a9267a6c6ae35c7
-
Size
144KB
-
MD5
29b54a420b48e8024a9267a6c6ae35c7
-
SHA1
50bd3194d2cc2e7eecd81de0e478727911f65623
-
SHA256
4fe3579e7a9ffaf67e7d07c8f74dce736b07640847dc89e1ff4eb653a2aab536
-
SHA512
dd3f485b3fdb9af708181c622c3a62cb5993482d39514e5b56670931fc1ecfebc77df8e9940f6118474d7fdddbe8a49434a45f3de2ad16ce497ccc1f3db5f7a2
-
SSDEEP
3072:III8SWBoD0kxRhOblSSaGxCp06p62O1Ts3qK5N7D1EZPDLgAgI:S0k/hwa9XqO7D1EdgzI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b54a420b48e8024a9267a6c6ae35c7
Files
-
29b54a420b48e8024a9267a6c6ae35c7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ