Static task
static1
Behavioral task
behavioral1
Sample
29ac53b14e3857411c1274288c5e30f3b0678a4a83d6da8ece36ed5a0fdfeca2.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
29ac53b14e3857411c1274288c5e30f3b0678a4a83d6da8ece36ed5a0fdfeca2.exe
Resource
win10v2004-20240426-en
General
-
Target
29ac53b14e3857411c1274288c5e30f3b0678a4a83d6da8ece36ed5a0fdfeca2
-
Size
127KB
-
MD5
2932a53073909e5266334af631a06f46
-
SHA1
305644b0630ea22988d523c705b3f18d01c35b58
-
SHA256
29ac53b14e3857411c1274288c5e30f3b0678a4a83d6da8ece36ed5a0fdfeca2
-
SHA512
a2aad294d55af39be9740acfb305065ad54a719ae23cbdd7c746ac9649b024484329d7739bc0de785ddb7526613f57c7a85e027f7a8465409493fd88fc163889
-
SSDEEP
3072:QOjWuyt0ZHqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPL:QIH9OKofHfHTXQLzgvnzHPowYbvrjD/O
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29ac53b14e3857411c1274288c5e30f3b0678a4a83d6da8ece36ed5a0fdfeca2
Files
-
29ac53b14e3857411c1274288c5e30f3b0678a4a83d6da8ece36ed5a0fdfeca2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
6062btuk Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
611gvlro Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
573dpgmk Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE