Static task
static1
Behavioral task
behavioral1
Sample
29926ffc10b3317f17b31a895d82e8ee854524c6e159f048807c1a56bd95e1c7.exe
Resource
win7-20240705-en
General
-
Target
33a3f1752ee6c63720aad8a9cc6787d9ebe80f01b319fad9338c53f6dd7995bd
-
Size
149KB
-
MD5
94a09733e649e57dacc67577635603f0
-
SHA1
36e6146c05a1e4e9fbdeaf55b2b13f13b57e65f0
-
SHA256
33a3f1752ee6c63720aad8a9cc6787d9ebe80f01b319fad9338c53f6dd7995bd
-
SHA512
b1c030b9e90a683138d4ce28a5e67186aa628c9ab14773a193f0ded91c313f76706fd9248e6df0da6e89f6c7a87a16b1f5409acc9b386d9e566bcf408c277825
-
SSDEEP
3072:0h5WF6YEzN8+IAKmaYcsxHouRTMrFOxW0YHrGhkENaqHkw+eB8iD/St:0h5WF6iHmaYxxHdTMZNG1aQ/B8ibSt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/29926ffc10b3317f17b31a895d82e8ee854524c6e159f048807c1a56bd95e1c7
Files
-
33a3f1752ee6c63720aad8a9cc6787d9ebe80f01b319fad9338c53f6dd7995bd.zip
Password: infected
-
29926ffc10b3317f17b31a895d82e8ee854524c6e159f048807c1a56bd95e1c7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 213KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ