Static task
static1
Behavioral task
behavioral1
Sample
29995f598949edf073fa2a0872ade7084e44cbd94798dd57a0c94fc2e9c4abac.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29995f598949edf073fa2a0872ade7084e44cbd94798dd57a0c94fc2e9c4abac.exe
Resource
win10v2004-20240226-en
General
-
Target
29995f598949edf073fa2a0872ade7084e44cbd94798dd57a0c94fc2e9c4abac
-
Size
826KB
-
MD5
674c31fcfff2c36ef307b00724a13cf3
-
SHA1
5ebc6aba17cec81957c68cafaf92cb4c972fddf3
-
SHA256
29995f598949edf073fa2a0872ade7084e44cbd94798dd57a0c94fc2e9c4abac
-
SHA512
7f1cc9f75038a11c9e813f63b6cdc723a1d2703570f15b64b0e848a8d8dbe2d1c8516caa0021f7a9347c8a2f794ebbb58adc1f3b8961c9acd79fe06d7b911653
-
SSDEEP
12288:zJMxy+7SM0ZWxevPMeRSau5QKJu9cTfmzv1xdbuVRPjpz+749h/iqrJQpTVGNIME:z2wTMcMn3hJlWNXbiRPl+76IqVQKS71
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29995f598949edf073fa2a0872ade7084e44cbd94798dd57a0c94fc2e9c4abac
Files
-
29995f598949edf073fa2a0872ade7084e44cbd94798dd57a0c94fc2e9c4abac.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ