29448d2da50059c63dc6558aa2554b955310457a1c6a67ef90df97acb5789bdd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29448d2da50059c63dc6558aa2554b955310457a1c6a67ef90df97acb5789bdd
Size

2.2MB
MD5

0f1109ac9d15bac7f70f9de39ecde9b1
SHA1

54f16f1ad73e43f595e8d05375b590cc51ee315a
SHA256

29448d2da50059c63dc6558aa2554b955310457a1c6a67ef90df97acb5789bdd
SHA512

817cca1e4379b06669329e43c96ee3e6fc3b7ef6b0dc2b91eb2bb6629ad0324b454d7b9526864e46c7ffc9d5dfbaf682ec957b26649f8f6dc4c317217cdbc998
SSDEEP

49152:rhnPZt4ISSP5Gslf9utg7dqPKB0f+6G2jMtPSMkH1XuGL:rVPEIlTV9utg7drqsNSMEXuGL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29448d2da50059c63dc6558aa2554b955310457a1c6a67ef90df97acb5789bdd

Files

29448d2da50059c63dc6558aa2554b955310457a1c6a67ef90df97acb5789bdd
.exe windows x86

d94df3d11d32ec48c5b3a279b15a7f13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP

user32

LoadIconA

gdi32

GetTextMetricsA

winmm

waveOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegSetValueExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

inet_ntoa

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 956KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ