Behavioral task
behavioral1
Sample
29a8b9aefb1f0339cbc0cddf49cbaf30N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29a8b9aefb1f0339cbc0cddf49cbaf30N.exe
Resource
win10v2004-20240802-en
General
-
Target
29a8b9aefb1f0339cbc0cddf49cbaf30N.exe
-
Size
61KB
-
MD5
29a8b9aefb1f0339cbc0cddf49cbaf30
-
SHA1
9f2de439ac3434dee98a169c7b75dd0830bc502a
-
SHA256
26341df53ba52aa4f6bc18d2da84505be69da11fd324d312fc4268124e646454
-
SHA512
a53a0cb365d47a30f4b355b4b4f70c5707ef28fab8495552abbbdabd49fd75fb15f6b67d13b35ab58c6e48ee7c1d9e84200a433adc78270e88966086c90f42b7
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKF9ADJr:V7Zf/FAxTWoJJZENTNyoKIKMN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29a8b9aefb1f0339cbc0cddf49cbaf30N.exe
Files
-
29a8b9aefb1f0339cbc0cddf49cbaf30N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE