Behavioral task
behavioral1
Sample
29ab849ee6a1cd82c542c3705410ba70N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29ab849ee6a1cd82c542c3705410ba70N.exe
Resource
win10v2004-20240709-en
General
-
Target
29ab849ee6a1cd82c542c3705410ba70N.exe
-
Size
1.7MB
-
MD5
29ab849ee6a1cd82c542c3705410ba70
-
SHA1
16601e6dc1c445864456284c01729b752a1b48e2
-
SHA256
8397bb557ffbf03039d240541a10a3a7ac6a86f5300e123c50142e7fc726955a
-
SHA512
c5e124faa6b4d55bd78e51df1561c97b31c0aaa752537f2fb887a5c7ccf73ce1616c77515e9085cca8ec2c2868e35f1da3f0a8b5b596d5eb18e41b0bf1b46c62
-
SSDEEP
24576:q9FBaAFPfUD2/A7UUwDgepSABrPSErf+hfAs8G7k+yCW2:YdFka/AYFDRpfPSyG95W2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29ab849ee6a1cd82c542c3705410ba70N.exe
Files
-
29ab849ee6a1cd82c542c3705410ba70N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE