29f18d1d43889dc0b8b3fcfee682430d | Triage

Sharing

General

Target

29f18d1d43889dc0b8b3fcfee682430d
Size

132KB
MD5

29f18d1d43889dc0b8b3fcfee682430d
SHA1

61fe80e1d5a4225d7a83acd391f0a16cfe5a6dab
SHA256

19f043aa966f13a29f9a860057fb2a290939f75115e9784989fcbe96ad9242cb
SHA512

dc6fd15227089b167e4cce123e5f582c4985ae32688d5483845b45cc3cd8a08b78f8b9375ec64d443a88411f903792a232ebae544381986138b7d2d9c87305a1
SSDEEP

3072:ZVVOY64v7jkfam1CXDDjtFCZaOKYZfG3QZuGc6O:ZVQY5vEb2DDjtlOzfYMh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f18d1d43889dc0b8b3fcfee682430d

Files

29f18d1d43889dc0b8b3fcfee682430d
.exe windows:4 windows x86 arch:x86

8055ba775ca6b6c6b5b0c0ae8ed352f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Options_RunDLL
ExtractIconW
SHBrowseForFolder
SHFileOperationA
ExtractIconA

comdlg32

PrintDlgExW
dwOKSubclass
ReplaceTextW
ChooseColorA
PrintDlgA

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE