29f34b750485f2941e5046a470005f1fef9afb71335e4641d06de6c4ba6ba07f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29f34b750485f2941e5046a470005f1fef9afb71335e4641d06de6c4ba6ba07f
Size

1.2MB
MD5

168d8f816275b98ab356d780285cca44
SHA1

121d61b0d8a56181310db33a4a1481daaf4107de
SHA256

29f34b750485f2941e5046a470005f1fef9afb71335e4641d06de6c4ba6ba07f
SHA512

6ce39e241cef957d3cefa8e7e66984c853ddf918142093be83d05677a2d8e6213fe51416d47726cb804b7f2c505a671b3d84460117ede7f0d1daca496b1df367
SSDEEP

24576:O1s29WH0bQjtbzm62P3nHkI+1m2AOv0oqyq0iu5E3Q7N:O1p9S1Z3m6WnHF+1BR7qyq0iu5OQ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f34b750485f2941e5046a470005f1fef9afb71335e4641d06de6c4ba6ba07f

Files

29f34b750485f2941e5046a470005f1fef9afb71335e4641d06de6c4ba6ba07f
.exe windows:4 windows x86 arch:x86

e001d63da8be9fec30be03bd002f5ab0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA

user32

SetRect

gdi32

DeleteDC

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries

olepro32

ord253

oleaut32

SysFreeString

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

shell32

SHGetFolderPathW

Sections

.text
Size: 212KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 920KB - Virtual size: 920KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ