Static task
static1
Behavioral task
behavioral1
Sample
29b22f8a33e8dd40cec2001bb1634769e1ab182fa93f4cfd90b13d8e3d955c28.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29b22f8a33e8dd40cec2001bb1634769e1ab182fa93f4cfd90b13d8e3d955c28.exe
Resource
win10v2004-20240226-en
General
-
Target
29b22f8a33e8dd40cec2001bb1634769e1ab182fa93f4cfd90b13d8e3d955c28.exe
-
Size
680KB
-
MD5
6f9dd1d11d377a7e1e31a6e724c050a7
-
SHA1
fd07c3e15d8f3f0afc5ad3097b2e95e0e77a1a3b
-
SHA256
29b22f8a33e8dd40cec2001bb1634769e1ab182fa93f4cfd90b13d8e3d955c28
-
SHA512
d6a4a099e47dd470c1290b9c3bdd4d872f3ca648a34bf0904008b284af0e4eda4875a5125f3de0dc7084bc348c468946bc9960042344b7167d4afc2cd7af28ec
-
SSDEEP
12288:gOLK1rlNcv++jZzCJittG+L+lVj9DSire03dol49F/M6CEKm5y8RyTQcd7:zirrirG+qjx2ENw495zwmEmykcd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b22f8a33e8dd40cec2001bb1634769e1ab182fa93f4cfd90b13d8e3d955c28.exe
Files
-
29b22f8a33e8dd40cec2001bb1634769e1ab182fa93f4cfd90b13d8e3d955c28.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 656KB - Virtual size: 650KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ