179fdaf04a29f852d8bea399d73d55c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

179fdaf04a29f852d8bea399d73d55c5
Size

134KB
MD5

179fdaf04a29f852d8bea399d73d55c5
SHA1

32ccc6cc6b6f35f36aa694e338a60e17a32dc3f6
SHA256

22d6971e7783225e126f3e853eae4d94be7efb03c84d3f254d0ba8375154365b
SHA512

f33a57726b7e6ffce86c3cdcc610a52b420205ad2edb528965c85de857605ab5449bb11c9e26e4e6a83b521f04bb9719ab46e4bc50cd43dedde8efdf110edf7f
SSDEEP

3072:48inQPLficf+bUNYgqCoH+xdEBZd9obYWYSknQztApHjaHs:48inQzf5fawYgImdEHEbjYatAVja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
179fdaf04a29f852d8bea399d73d55c5

Files

179fdaf04a29f852d8bea399d73d55c5
.exe windows:5 windows x86 arch:x86

add0d38759610f6b9fc06bf60ecff439

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCompactPathExW
ord29

kernel32

lstrcmpiW
GetModuleHandleW

gdi32

GetPixel

Exports

Exports

?BingoGetOut@!PEH_KK:X

Sections

.text
Size: 24KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ