29bb58dc3e795f4b8c02c9c282c808d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29bb58dc3e795f4b8c02c9c282c808d0
Size

102KB
MD5

29bb58dc3e795f4b8c02c9c282c808d0
SHA1

67b98da1d2c437c5e21bb4314537d3dce6d5beda
SHA256

1b2226273a68841374ba3d64a5e233fba3766b8e77bcc5b08329e038b4fd6cc2
SHA512

dbb0214fd53c056b0ac5ef17faad65030b495ee94707b1d8e769ff0dffba54df48e00637c899af217638803fe62a1152774bd0d78f09fc101a11e808f0f70571
SSDEEP

3072:2xgqsjm5Zz359qx0g4tDKyHND/fRe77tcLSVb+g:2+qs+z35wxR4o0NLfw2LSVKg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29bb58dc3e795f4b8c02c9c282c808d0

Files

29bb58dc3e795f4b8c02c9c282c808d0
.exe windows:4 windows x86 arch:x86

66c973423f70d8ef4ac5c5e6602a1d37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
SetFilePointer
SetStdHandle

user32

EnumPropsW
FillRect
GetClassLongW
EndDialog

Sections

.text
Size: 72KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE