Static task
static1
Behavioral task
behavioral1
Sample
29bfc92c1490a0f299c67a1c7e2dd20fd408d4f5e138bec1c8facefe7ad40430.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29bfc92c1490a0f299c67a1c7e2dd20fd408d4f5e138bec1c8facefe7ad40430.exe
Resource
win10v2004-20240226-en
General
-
Target
29bfc92c1490a0f299c67a1c7e2dd20fd408d4f5e138bec1c8facefe7ad40430.exe
-
Size
28KB
-
MD5
95a1cea6639df70e011fa031dea9d62e
-
SHA1
bcdd8ac98bcbfe7010a454961d98a2ac4f98870d
-
SHA256
29bfc92c1490a0f299c67a1c7e2dd20fd408d4f5e138bec1c8facefe7ad40430
-
SHA512
ca9b53b1a682633935e9a8e1e93e9df9bfcbc9bda7d33cbb4ed04d66e11bd018200df40a91700df1f867cbfcbcc56a199c25eb73a8c4461a75d371f4f1301d74
-
SSDEEP
384:nXqjDRqogPpF6rZEClWI//8DhsFhOEe5/1bWa66RheIMV/s:XqjYxPzcZ538DCj6B56WeTa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29bfc92c1490a0f299c67a1c7e2dd20fd408d4f5e138bec1c8facefe7ad40430.exe
Files
-
29bfc92c1490a0f299c67a1c7e2dd20fd408d4f5e138bec1c8facefe7ad40430.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ