Static task
static1
Behavioral task
behavioral1
Sample
0b29f868645c7a9b4dabae8318d0d2a4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b29f868645c7a9b4dabae8318d0d2a4.exe
Resource
win10v2004-20231215-en
General
-
Target
0b29f868645c7a9b4dabae8318d0d2a4.exe
-
Size
854KB
-
MD5
0b29f868645c7a9b4dabae8318d0d2a4
-
SHA1
8d9c3942c4dc2812d91fb4f712603ffd2647b1d8
-
SHA256
8b9ea067921a0416153461a79d43981ce78bd4bec3c4947175a9f3f1a477898d
-
SHA512
eaa9cc5f2d6fda18ded12a667dd8fbbfe3bc041daeae9b86405fa2369b943682f78cf1e7ef17ad38ecb9f311e5e25a00eee1f2aff85f84bba85c58d4762b1a78
-
SSDEEP
12288:UZWtI6RkqOB0v2eZJys73dOvXDpNjNe8LOrOB0v2eZJys73dOvXDpNjNe8n:UuhaqOA2eZJ8NI80OA2eZJ8NI8n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b29f868645c7a9b4dabae8318d0d2a4.exe
Files
-
0b29f868645c7a9b4dabae8318d0d2a4.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ