29fb69876987924e5f5a751eba299b14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29fb69876987924e5f5a751eba299b14
Size

7KB
MD5

29fb69876987924e5f5a751eba299b14
SHA1

3188620c13a9ffe1840e26b59753ec8ff32a7402
SHA256

7c62ff582a2b5cd32017017242383d4ccf70a2caaf433db14ddccd07b7224c9f
SHA512

4f72a6142a15c79e8a4dd606f1ba0bac4926553e46f6a88e0ba34809d520ec51975e975c65caca3c979f3bb43b93d651a85b347022c223a19fad2a9cc7dbc566
SSDEEP

192:1XRdMGP9U34N6zJqEU3d2AaBU7PaYtxJ:1XRdb1UQIc8wPao

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29fb69876987924e5f5a751eba299b14

Files

29fb69876987924e5f5a751eba299b14
.exe windows:1 windows x86 arch:x86

251575623650bc933bad8739ca1c1602

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
Sleep
CreateThread
ExitProcess
VirtualAlloc
RtlMoveMemory
WaitForSingleObject

user32

MessageBoxA

ntdll

NtSetInformationThread
RtlDecompressBuffer

Sections

.code
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE