29dd86ff65206ce851602fa4af777c54 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29dd86ff65206ce851602fa4af777c54
Size

3.2MB
MD5

29dd86ff65206ce851602fa4af777c54
SHA1

4cb4a16be3bee0db2e76b1d1a28d401b73cbe5fb
SHA256

69d386d3bdfd10b2735d74417bc0dad174b2c5e50b603962c049035013c11392
SHA512

888a0435baba2d9a5074964ac903a2caa6d55ed9c2fc8ad5b7f4f8438663c3f8295157ef7e1ec1f7bca760c69d3e91a8585151ed775f5c97ece653f65932ba24
SSDEEP

98304:/qXpy05Q0N1rsYSZ6BoXh1kkypSH3Oh5BemgHTQTf:6405QYtsTEB08T8HehLvkEz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29dd86ff65206ce851602fa4af777c54

Files

29dd86ff65206ce851602fa4af777c54
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

h0 -Xz
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ