29b0d6640be108a6d50ed47c20ff0e3dfb5ccd8bfd806ac678a9abd6532a2878 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29b0d6640be108a6d50ed47c20ff0e3dfb5ccd8bfd806ac678a9abd6532a2878
Size

1.1MB
MD5

38356b791a9b166693d1ff6e49d37ede
SHA1

e73c8e1c9af10dca5f478d214ca5d2c39493b04e
SHA256

29b0d6640be108a6d50ed47c20ff0e3dfb5ccd8bfd806ac678a9abd6532a2878
SHA512

fc048e2176033c5019c915387e345f860a0bec8150a4ae1c437d83c13a823db385c75aa085565bdf9fd1274a2eeb29c5f8dbe78f7943799abc6d876f29add6f3
SSDEEP

24576:q+9tWbM4LoSEzCgjV1HPbNCBtegaFGFYFyCJJa4q:qlbM2ZmVZPbILUYFYFyCJJzq

Score

N/A

Malware Config

Signatures

Files

29b0d6640be108a6d50ed47c20ff0e3dfb5ccd8bfd806ac678a9abd6532a2878
.exe windows x86

998383a0d3eee350ddb8b84d1cee40d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
GetUserDefaultLCID
GetModuleHandleA
GetCommandLineW
GetCurrentProcess
GetTickCount
GetCurrentProcessId
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
GetCurrentThreadId
GetCommandLineA
HeapAlloc
GetProcessHeap
SetLastError
GetStringTypeW
Sleep
IsDebuggerPresent
WriteFile
SetUnhandledExceptionFilter
GetOEMCP
GetFileAttributesA
FindClose
GetModuleFileNameW
UnmapViewOfFile
GetCPInfo
EnterCriticalSection
CreateProcessA
InterlockedDecrement
FreeLibrary
WideCharToMultiByte

Sections

.text
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ