Static task
static1
Behavioral task
behavioral1
Sample
29659484d03d5d5a0add22bd3d6d2070N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29659484d03d5d5a0add22bd3d6d2070N.exe
Resource
win10v2004-20240802-en
General
-
Target
29659484d03d5d5a0add22bd3d6d2070N.exe
-
Size
64KB
-
MD5
29659484d03d5d5a0add22bd3d6d2070
-
SHA1
790fa8a39f85786c777e39568e9893bb5893cdd6
-
SHA256
ec15b25d35fd41ce7191aab5d17f6ca094cb3ce6c85fc73d8c248abcc4582bde
-
SHA512
bcfa7a19c82360e490abe9055ac862cbb7cffbbfe80088b3ccafe44c366de296a9f813afad4dc6924703e6c24bfbcf066a44d6ffec8585431faa46c61150533a
-
SSDEEP
1536:v5LrMcvgnBlbJZ9Dchgnsn6zFGPwM6Iuwr+JoiY/OQKJw:v5LrMcUbRPsKFauwr+JbQD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29659484d03d5d5a0add22bd3d6d2070N.exe
Files
-
29659484d03d5d5a0add22bd3d6d2070N.exe.exe windows:4 windows x86 arch:x86
f9850d62cf5d06134db979f08ac163f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadFile
GetLastError
GetModuleHandleA
WriteConsoleW
GetCurrentDirectoryW
WriteConsoleW
FormatMessageA
IsBadStringPtrW
CreateMutexA
WriteConsoleW
lstrcpyW
IsValidLocale
GetStartupInfoA
GetFileSize
GetFileTime
FindResourceA
ReleaseMutex
CloseHandle
SetFileAttributesA
lstrcpyA
HeapCreate
msi
MsiCreateRecord
MsiCloseAllHandles
MsiAdvertiseProductA
MsiCloseHandle
user32
IsZoomed
SetCursorPos
GetWindowLongW
IsWindow
SetFocus
LoadCursorW
IsDialogMessageA
GetWindowTextA
IsCharLowerA
PeekMessageW
PostMessageW
wsprintfW
DispatchMessageA
wldap32
ldap_add
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE