0129584842c72858ad541164a099aeff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0129584842c72858ad541164a099aeff
Size

811KB
MD5

0129584842c72858ad541164a099aeff
SHA1

0634c3685e449c0d00be57d35bd04b6081565ace
SHA256

088eb945b9c192d2247835fc1eeb1c8e23fd0e2fbc15b51a293d2c3ccab4de02
SHA512

64851b5f8ab708a35e575b73b4e7540db95693609899a23f854beafc19e8aa75a8d69006a61808942c1d19faa7ca1df0aa617ada15da6cf0f3f148601042a3d7
SSDEEP

12288:P9nRGfBdI4nchm3mLRy/pHl+KuPCPNzJcmhUepxz6IADG6w+WNt9N:RYfBddYm3v1l8PONzJ9rvUG6w+WLv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0129584842c72858ad541164a099aeff

Files

0129584842c72858ad541164a099aeff
.exe windows:4 windows x86 arch:x86

2856efdfaf4b676aa305e303dbf28484

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GlobalFree
ReadConsoleA
CloseHandle
GetTickCount
SetEvent
DeleteFileA
WriteConsoleA
LoadLibraryA
GetProcessHeap
CreateFileA
GetStartupInfoA
CreateDirectoryW
CreateSemaphoreW
SetLastError
HeapSize
GetFileAttributesW
GetFileSize
SetLocalTime
GetModuleFileNameA
OpenSemaphoreA
Sleep
GetEnvironmentStringsA
lstrlenA
VirtualProtect

user32

SetFocus
CallWindowProcW
DispatchMessageA
IsZoomed
IsWindow
DestroyMenu
GetWindowLongA
PeekMessageA
FindWindowA
DrawTextW
GetClassInfoA
GetSysColor
DispatchMessageA

wups

DllRegisterServer
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject

advapi32

RegCloseKey

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE