Static task
static1
Behavioral task
behavioral1
Sample
b29d1088b198bdd9c50d3501923b6479e59f5b7714c5d4027b629aeac4ebe8f5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b29d1088b198bdd9c50d3501923b6479e59f5b7714c5d4027b629aeac4ebe8f5.exe
Resource
win10v2004-20231222-en
General
-
Target
b29d1088b198bdd9c50d3501923b6479e59f5b7714c5d4027b629aeac4ebe8f5
-
Size
32.1MB
-
MD5
3b794f355d3e370009959fbcf3407097
-
SHA1
cc5ac2d2cf621eae6d929325aa9c1597c9a1514f
-
SHA256
b29d1088b198bdd9c50d3501923b6479e59f5b7714c5d4027b629aeac4ebe8f5
-
SHA512
10b94f27b744d8bf9404df8ad7965232f1067caeb642940009a2e3f1387b06b8e4a6cf0db7c94fe1887148a2ed4274b774e1e2b0ff62605d77b221dff5be3fe3
-
SSDEEP
196608:lvvvvvvvvvvvvv7ilt9rLQsTB3+wpXPxdRgge64xRBjFxm8qcywpicyREWI/wyA6:8LQsTBunN/jRXpvHYk0ybyRxco
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b29d1088b198bdd9c50d3501923b6479e59f5b7714c5d4027b629aeac4ebe8f5
Files
-
b29d1088b198bdd9c50d3501923b6479e59f5b7714c5d4027b629aeac4ebe8f5.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 32.0MB - Virtual size: 32.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ