Static task
static1
Behavioral task
behavioral1
Sample
29bb38576dc9f41f1b9460e4ed66cf50N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29bb38576dc9f41f1b9460e4ed66cf50N.exe
Resource
win10v2004-20240802-en
General
-
Target
29bb38576dc9f41f1b9460e4ed66cf50N.exe
-
Size
40KB
-
MD5
29bb38576dc9f41f1b9460e4ed66cf50
-
SHA1
ab5610efb2d30b979a9d0f7cd3612c05b6fe7850
-
SHA256
3374ff26001c9a1986806fbb3fd66aa3616f74b254ee1f6ad40490e21c3d35a1
-
SHA512
4ab9dd967f1fd64f2d5acc86c1f124a43eec69b6080745e152fc47b77edbca70c6c955329652ea9e3aecbe36eaf901899ac74a1cb62e695e6aab461679dee816
-
SSDEEP
768:xDr3MH3DrSkEBvr3tjNPaR7GHukbQbxubktRItz2R/82XtHktKzk:xDLcaJvr3tjNP6GHukbbbimMR/3E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29bb38576dc9f41f1b9460e4ed66cf50N.exe
Files
-
29bb38576dc9f41f1b9460e4ed66cf50N.exe.exe windows:4 windows x86 arch:x86
cfa927e4ddd32b960b276cab1c4fcc88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetLastError
MultiByteToWideChar
ReadFile
GetConsoleCP
VirtualAlloc
VirtualQuery
CloseHandle
SetFilePointer
SetStdHandle
WideCharToMultiByte
DeleteFileA
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE