Static task
static1
Behavioral task
behavioral1
Sample
29b5071f536215e321b8d53841869cda1d43cd058975f640f6686ef4718bda77.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29b5071f536215e321b8d53841869cda1d43cd058975f640f6686ef4718bda77.exe
Resource
win10v2004-20240426-en
General
-
Target
29b5071f536215e321b8d53841869cda1d43cd058975f640f6686ef4718bda77
-
Size
681KB
-
MD5
07c9fe78d4c1c8fc288609eda7481a2d
-
SHA1
e52f2906adabae4434a277e81618772b2e025023
-
SHA256
29b5071f536215e321b8d53841869cda1d43cd058975f640f6686ef4718bda77
-
SHA512
833e5af5352b7e6e845a0ac84a4ef8fb683363675e9091c87f81dec19d7edd6dfb7cc481ebbbb3902601c2b8d85d8e6d31f4ec7abb4a1eac5568ab795eaae938
-
SSDEEP
6144:wlj7cMnfX+nC9LRU0ySj14WH+JPb7uL8zRMnJjNhAp7SO8zRMnJjNhAp7S8FRcd6:wlbP+CPFlTL
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b5071f536215e321b8d53841869cda1d43cd058975f640f6686ef4718bda77
Files
-
29b5071f536215e321b8d53841869cda1d43cd058975f640f6686ef4718bda77.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE