Static task
static1
Behavioral task
behavioral1
Sample
29313e3e27979a7e98c7a525438106f72c31b994e602809e4ca366584b7fe781.exe
Resource
win7-20241023-en
General
-
Target
29313e3e27979a7e98c7a525438106f72c31b994e602809e4ca366584b7fe781
-
Size
1.9MB
-
MD5
021f5fd92b5c8e07186d5ffc8b972417
-
SHA1
099fc288b00c0ad358a4790adb3e8c884a5bcee1
-
SHA256
29313e3e27979a7e98c7a525438106f72c31b994e602809e4ca366584b7fe781
-
SHA512
00738f811bbc5fe35852897260f39a072aa7cdab52245ec8375c487b43554885c610174ec6b05885b5b1a248559c5a575dbca522854d9f165e3ba82a73f1fc39
-
SSDEEP
49152:jwPLs5Cf2G4/2yPELN12zC72yuY7+uUlPzujDCp3c:szs5C+/B8x1wuUlPzS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29313e3e27979a7e98c7a525438106f72c31b994e602809e4ca366584b7fe781
Files
-
29313e3e27979a7e98c7a525438106f72c31b994e602809e4ca366584b7fe781.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 147KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mfnwbtgi Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
buxxuqdo Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE