29f7a632ac271d2f9f38244359cc1422 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29f7a632ac271d2f9f38244359cc1422
Size

737KB
MD5

29f7a632ac271d2f9f38244359cc1422
SHA1

21258df02ab2a126f8053250781486d764c6f328
SHA256

f8b85efe253a4a3ca7885f0ab9785eb07da338064d0580ebb9cc7cc85eab7a56
SHA512

764ae4262516874ad04e38e6a230769991ca6734c5dd29df6c7d2cfed6e1694d06234112f3307672c9df9f4ab4dc7b419bf80389fba2e2f013251be1ab7a792a
SSDEEP

12288:ebbxDnM0feKuDFGdx3xNlAI05/tEIllhVXHds8GAyFOoFdmTl2M:ebbyxKuKx3xNlJ0vbBV3ds87ULFdmTlN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f7a632ac271d2f9f38244359cc1422

Files

29f7a632ac271d2f9f38244359cc1422
.exe windows:4 windows x86 arch:x86

5f2df7257758bf2707e2911007001ebd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CreateThread
LoadLibraryA
FindResourceA
GetModuleHandleA
LocalAlloc
LocalFree
GetCommandLineW
GlobalAlloc
GlobalFree
SetEvent
CreateProcessA
ExitProcess
GetTickCount

user32

GetClientRect
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
CreateWindowExA
LoadBitmapA
SendMessageA
DestroyWindow

Sections

.text
Size: 164KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 356KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE