c29efbd2537b2d750e3aaad4b4930169 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c29efbd2537b2d750e3aaad4b4930169
Size

6KB
MD5

c29efbd2537b2d750e3aaad4b4930169
SHA1

c646d309ae059a6384b7e7f3fed062e50f52ca75
SHA256

de6269c9432d1cf37d1dcb79ee874c30babd9294766f179360979a9d6fd7010d
SHA512

2bc6f74f9c15deb27315f5127c28cea1a496eb81cab54e72f63bed8e18cb414bc832598fb9fa06bbf185a853171f26fa6fbcda4205fbd70179488395c0d56026
SSDEEP

48:iyTVf4Pn062hUDszst3mBgL1GgSsvkY0WXvR5lsBPACSQK+6g4qT94z:Zxs2YslBgL1A60+RPsuC7tCEQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c29efbd2537b2d750e3aaad4b4930169

Files

c29efbd2537b2d750e3aaad4b4930169
.exe windows:5 windows x86 arch:x86

b93dbcff3fc3aa94ba7a7c58220b1eaf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
HeapAlloc
GetProcessHeap
GetProcAddress
GetModuleHandleA
ExitProcess

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ