029e5b5d5bb3c48b445ef2362301ccbc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

029e5b5d5bb3c48b445ef2362301ccbc
Size

112KB
MD5

029e5b5d5bb3c48b445ef2362301ccbc
SHA1

9e778f11b464407d472dc3d318ff7b56355addfb
SHA256

cce9c9f514b57de964e648471661a31ae5855ba40939c2cc4b2868978b5bf717
SHA512

a4359ef5e077910f92928ef3826c888b600ff96f737a384564562d754e61b648fbd5e978546e7553d93484440cdef1f5eec1cdcd3505ca3f8ba51c2758aa4160
SSDEEP

1536:8oq3pm4qe7NIipMNvGzN8sYx6pWUzAoOyJDGKBx5xzI3OpLDn:03F9IRP9wpf+i7By3OxDn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
029e5b5d5bb3c48b445ef2362301ccbc

Files

029e5b5d5bb3c48b445ef2362301ccbc
.exe windows:4 windows x86 arch:x86

9ad0df3a35fb02af92b491d011d91983

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesW
FindResourceW
LoadResource
WinExec
VDMConsoleOperation
ExpungeConsoleCommandHistoryA
GetCPInfo
SetDefaultCommConfigA
GetProcessShutdownParameters
CancelIo
CreateThread
GetOEMCP
CreateDirectoryExW
LocalSize
CommConfigDialogW

user32

InvalidateRect
GetMenuItemCount
GetDoubleClickTime

shell32

SheChangeDirA
StrNCmpA
PrintersGetCommand_RunDLLW
StrStrA
SHGetPathFromIDList
StrRStrW

gdi32

SetSystemPaletteUse
SetRectRgn
ResetDCA
STROBJ_vEnumStart
CLIPOBJ_bEnum
EngPlgBlt
GdiDeleteSpoolFileHandle
GdiResetDCEMF
FONTOBJ_vGetInfo
OffsetViewportOrgEx
EqualRgn
PlgBlt

Sections

.code
Size: 20KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ