29579281a5a489f78d9ce79d9eeea8aa | Triage

Sharing

General

Target

29579281a5a489f78d9ce79d9eeea8aa
Size

7KB
MD5

29579281a5a489f78d9ce79d9eeea8aa
SHA1

7440a7580c8a6c5a936c384e07942751376e828f
SHA256

f77de765c88a2f669a709ba0a619d8806cd0bf4b9d9c191725cc1d09b7880539
SHA512

bdafb19cc7d71019bce28b23caf676b3ca9128c2706627a64e4e1f48d42ca819cb1d13b488caf31b4662cdb24244a734bac2ebe906dbd7a1fb258c01d0597a24
SSDEEP

96:irWAf9DsqBZ2zyM3TC5E4KSjaRCNDVN1kfC1FH+T0IUdr/vcOmi:iK0sqezyGMvKS8Cx1kq/egIU9/v8i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29579281a5a489f78d9ce79d9eeea8aa

Files

29579281a5a489f78d9ce79d9eeea8aa
.exe windows:4 windows x86 arch:x86

5f74a5651ed6587ba9c802565881be39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
WideCharToMultiByte
lstrcpyA
lstrcatA
HeapAlloc
HeapFree
GetProcessHeap
ReadFile
ExitProcess
CreateEventA
SetEvent
CreateThread
ExitThread
CompareStringA
Process32First
CreateToolhelp32Snapshot
RtlUnwind
InterlockedExchange
VirtualQuery
WaitForSingleObject
CloseHandle
PulseEvent
GetModuleHandleA
GetProcAddress

user32

PeekMessageA
CreateWindowExA
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
AnyPopup
TranslateMessage

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE