29e9fee4251f25f2b5b92361cf225ab8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29e9fee4251f25f2b5b92361cf225ab8
Size

749KB
MD5

29e9fee4251f25f2b5b92361cf225ab8
SHA1

8b4273ecf98bc1b9689a0c6e8c5784cf75a6a5d5
SHA256

45b5a2939dadb61a137f1fde6d4fb1c9081b6647760d8ce87248b6e0d39d7215
SHA512

a200f43ece456ef95dacd6ff41cdea6010880dff1d7e1d114188a1a757a13b3f807e2da8fb194d094d6ef49593d09f02bba6cef0ee1a52d90a47289c939be340
SSDEEP

12288:HD6x80ldmZfTzUGlR/r0kIVCdMgj2oJxgFhMGuHVmszz+YUNaRIXmUZ:HD6xCZbwI9IkI8dMgqoJe8J/+YUINe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29e9fee4251f25f2b5b92361cf225ab8

Files

29e9fee4251f25f2b5b92361cf225ab8
.exe windows:5 windows x86 arch:x86

c836045d6f9fc363e095c2948b59509d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreW
GetModuleHandleA
HeapCreate
Beep
GetCommandLineA
AddAtomW
GetFileType
RemoveDirectoryA
HeapFree
CreateDirectoryA
CreatePipe
FindAtomA
GetVersion
SetVolumeLabelA
GetModuleFileNameA
CloseHandle
DeleteAtom
GetDriveTypeA
WaitForMultipleObjects
RemoveDirectoryA
ExitThread
IsBadWritePtr
WriteFile
GetTapeStatus
FindClose

uxtheme

SetWindowTheme
GetWindowTheme
CloseThemeData
DrawThemeEdge
DrawThemeBackground
GetThemeBool
GetThemeSysSize
GetThemeTextExtent
GetThemeColor
GetThemeTextMetrics
CloseThemeData
IsThemeActive
OpenThemeData

odbcbcp

bcp_bind
bcp_bind
bcp_bind
bcp_bind

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 741KB - Virtual size: 740KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE