Static task
static1
Behavioral task
behavioral1
Sample
29bbda109d920c6bcf177801c395c5a6df381f5c0f70c2806c27b4b106660c9b.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29bbda109d920c6bcf177801c395c5a6df381f5c0f70c2806c27b4b106660c9b.exe
Resource
win10v2004-20240802-en
General
-
Target
29bbda109d920c6bcf177801c395c5a6df381f5c0f70c2806c27b4b106660c9b
-
Size
194KB
-
MD5
bf19108fbca381f3bd4b601cdef3a9e1
-
SHA1
60fe7a0c1d0d795d33140f1e27bcac9ee96e860e
-
SHA256
29bbda109d920c6bcf177801c395c5a6df381f5c0f70c2806c27b4b106660c9b
-
SHA512
214986d382e46e34bae2b9ff71da6b29a4d10d4c0d0855a79c7706ea5d1b5dba437438bd4154132f3d6ee468e41b8ca617ad38432bc6fe736917beae6dfe2e69
-
SSDEEP
6144:DBs27GluLyXxQQIIIhg6XXXDzXXX13s2III/TAXXXmlXXXLIIIG/ru5YgR:DK2+yQIII1XXX/XXX62III/UXXXmlXXw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29bbda109d920c6bcf177801c395c5a6df381f5c0f70c2806c27b4b106660c9b
Files
-
29bbda109d920c6bcf177801c395c5a6df381f5c0f70c2806c27b4b106660c9b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ