Static task
static1
Behavioral task
behavioral1
Sample
29cb02cc7df008549910b28ad449c08afe36c71befddb9fd7cbd3ca6399cd287.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29cb02cc7df008549910b28ad449c08afe36c71befddb9fd7cbd3ca6399cd287.exe
Resource
win10v2004-20231215-en
General
-
Target
29cb02cc7df008549910b28ad449c08afe36c71befddb9fd7cbd3ca6399cd287
-
Size
2.9MB
-
MD5
523013fda432e2ed9edb91d66c7a2caf
-
SHA1
2c8c1f87c91239b5f02aabd200085c58fe637137
-
SHA256
29cb02cc7df008549910b28ad449c08afe36c71befddb9fd7cbd3ca6399cd287
-
SHA512
b3186118e65c7bf0b7912d226f7dd5d32f47d3651e9e9b2f108d9747c8a68b882c88f5f135ec8fcb709b633b6a1bcbddda92157564a177f03bb704047e2bb795
-
SSDEEP
49152:aY3P1rPmPvxn4SA6EM3cch2gcsppdJ56639ereyma0IZVmRx/EavdH+4AEY56:a0tivl4R6VTtpplL39R+ZM/snEw6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29cb02cc7df008549910b28ad449c08afe36c71befddb9fd7cbd3ca6399cd287
Files
-
29cb02cc7df008549910b28ad449c08afe36c71befddb9fd7cbd3ca6399cd287.exe windows:4 windows x86 arch:x86
c7cc74b62af82ea5029cc38a274c874a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
CreateSemaphoreA
user32
LoadBitmapA
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ord17
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.8MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1020KB - Virtual size: 1020KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ