29a3ed726f23415f2d194ad04ddba94a | Triage

Sharing

General

Target

29a3ed726f23415f2d194ad04ddba94a
Size

57KB
MD5

29a3ed726f23415f2d194ad04ddba94a
SHA1

bde4fb18978015baa9f9095975768195f8bd51fe
SHA256

cb6146f2444e53b4cfeefe5674c531e6def70e6e98144486604e8379c767184d
SHA512

aa44e02d9cd6c6fb97fa865876dfbc6234b57c7a4d8fa3548f0b32033f334d0a483c52599d09496b6c5e8ad336ab759b2f1344e2b0b7f5c6d93389c169a6b0a2
SSDEEP

1536:DADfKKot6iSliwCypyG0p0iTGbyIMB9dz/Yi6g:tcliwBp2kybB9dzQ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29a3ed726f23415f2d194ad04ddba94a

Files

29a3ed726f23415f2d194ad04ddba94a
.exe windows:0 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ