29fe1230022841d56ec9576579392b0f | Triage

Sharing

General

Target

29fe1230022841d56ec9576579392b0f
Size

196KB
MD5

29fe1230022841d56ec9576579392b0f
SHA1

6aab61d1a42c50e4e48cf96d9358d6ccb1ed6c11
SHA256

79f1bcd4cfd785e8a98b0af793e4e84d3969e62ed4d205c53de4fca0f129f500
SHA512

a036f026a0d8e3ca96e4db015ef1bd1a8458754beb4706d9a2152e890b2b584e41a460db2a3c354924e02c1c6e27b0ec12abaa9d3cf6f67dc2e1173939cffb24
SSDEEP

3072:GVmHcLY0bOVd/S9AJJjWm/73gAZdujVvPdwiWoQmAPSL0RFR0Yu7J:g1bOVJdJh//73TEhPdXAPSGn0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29fe1230022841d56ec9576579392b0f

Files

29fe1230022841d56ec9576579392b0f
.exe windows:4 windows x86 arch:x86

fe1e6c576acc1b15c6ff53296e69202d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
IsBadReadPtr
GetProcAddress
GetOEMCP
GetCommandLineW
ExitProcess
GetACP
VirtualAllocEx
GetModuleHandleA
LoadLibraryExA
GetModuleHandleW
IsBadHugeReadPtr
GetCommandLineA

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ