0129e67673c7c3371fea7f271a0ed748 | Triage

Sharing

General

Target

0129e67673c7c3371fea7f271a0ed748
Size

39KB
MD5

0129e67673c7c3371fea7f271a0ed748
SHA1

027c5ac166dc81efad124fba6804b7db1bc847c0
SHA256

36beb1e7347057626b247d97f2b8669c01d0d4437877e61d1e26b470a47476dd
SHA512

21ed09f7308fcf4956c2ab175a37c92d2ea590a7216c9c10f29a005818a338b68f436cf7f6df857811c4f9d8012ed31cdf8b7ba725768acc1f169fd43f154001
SSDEEP

768:SzLoYj/s3MY2C162DG9pFz6uEpYJgiMgIf2aNBIFZCzccx5BXPox:0MYQ3n2WTczxqYJgHf2aNBSZ5cx5Fw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0129e67673c7c3371fea7f271a0ed748

Files

0129e67673c7c3371fea7f271a0ed748
.exe windows:4 windows x86 arch:x86

10b7bb8647cfba97fc3b63299a535991

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA

user32

SetTimer
SendMessageA
GetActiveWindow

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ