a29e074ed93723242cb5259098d9ecd2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a29e074ed93723242cb5259098d9ecd2
Size

55KB
MD5

a29e074ed93723242cb5259098d9ecd2
SHA1

68508c039bec34506ac0b89382ff1c6eb32e62af
SHA256

175291fafcefac2774bf9f345b0b35b95f1e03748d6fc5b325bb54433faba0a8
SHA512

1fa55b6cad4c869ec45a6098bdb05bc8b63f29520fe191422e80e856f804d7b0e0464aab282bb4e80b030db53b99cf2ea8eb30df0f3d609f4dc8224f502dd0b1
SSDEEP

1536:waVrIbZx2juuehujmU7eQ2DETlhlW85GDBcsd:waKdsjPWuR2DERha1P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a29e074ed93723242cb5259098d9ecd2

Files

a29e074ed93723242cb5259098d9ecd2
.exe windows:4 windows x86 arch:x86

88fc5a6acb4204af3d8af9d0cc71153c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawStateA
EnableMenuItem
EndDialog
GetCursor
GetDC
DestroyIcon
MessageBoxA
MessageBoxIndirectA
OemToCharBuffA
RegisterClassA
ShowCaret
DestroyCaret
DeleteMenu
CreatePopupMenu
CreateDialogParamA
CopyImage
CharUpperBuffA
CharPrevA
ChangeMenuA
LoadMenuA
wsprintfA

kernel32

VirtualAlloc
Sleep
GetVersion
FreeResource
ExitProcess
EnumResourceLanguagesW
EnumResourceLanguagesA
CloseHandle
lstrcmpA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE