29af100d03729363bae5b4c8935dcaec

General

Target

29af100d03729363bae5b4c8935dcaec
Size

50KB
MD5

29af100d03729363bae5b4c8935dcaec
SHA1

e664ee68e4803e4b0fb3a6868e16f1ff30a2be61
SHA256

6d6cb4210c674d3ceb88d361a36593c14552c4dfc6ca190a63684ddee71abb1f
SHA512

412b74f7d19ca1a102889d6b20b25719d00d99429666ec6e1e8688717a25d1f3c8fcf005f982f65db80bfa3f104b395605dbb3212bbcd0d5a24fff70f0700fc1
SSDEEP

768:jdB1XPKiRpMzO3Ugd3zFBXurXJq5FMmPLmGcKX9tcs:ZBJCiMuUgdDurXYtPad4tcs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29af100d03729363bae5b4c8935dcaec

Files

29af100d03729363bae5b4c8935dcaec
.exe windows:4 windows x86 arch:x86

6d18cd363e14f39a570603c7e14f28b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCommandLineA
LoadLibraryA
GetProcessHeap
GetTickCount
HeapFree
GetVersionExA
HeapAlloc
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CreateFileA
CloseHandle
FlushFileBuffers

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d18cd363e14f39a570603c7e14f28b3

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 13KB

.rsrc Size: 201KB - Virtual size: 200KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 13KB

.rsrc
Size: 201KB - Virtual size: 200KB