129ae3c2e5c8af75dfa723684f75c402 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

129ae3c2e5c8af75dfa723684f75c402
Size

100KB
MD5

129ae3c2e5c8af75dfa723684f75c402
SHA1

c2092435a7e70b64ee64db2e7a4d16cca2dc901c
SHA256

e49671189018d6107efcaaf8556d3def7c0f810177bc5a5f62040011d24dbe3c
SHA512

c563327b20a30e5690bbda28d8bdc98d32a3cdbd9fc0597cfac2035de0d4cd9f5fa77a962d7cc073fe0edaa2ba90f46780b893a7a65818653648f8bb8beb1c25
SSDEEP

1536:qr0vpov8sFPKza8N3gVRZ50VvaU9mRKG2oLpD6UwYc:e0Bov8sFP2a8N3yhRKGaSc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
129ae3c2e5c8af75dfa723684f75c402

Files

129ae3c2e5c8af75dfa723684f75c402
.exe windows:4 windows x86 arch:x86

076e05fd81e85cb96464fb465e82fd49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrcmpA
lstrlenA
GetCommandLineA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetStringTypeW

user32

IsCharLowerA
IsCharAlphaNumericA
IsCharUpperA
MessageBoxA

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ