0129a34b79cbf779c842b15d3642d430237aa7ad963d5ed938c565588e2ecafe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0129a34b79cbf779c842b15d3642d430237aa7ad963d5ed938c565588e2ecafe
Size

76KB
MD5

3af8dcadd00c343dcdcd4be9a03f73fd
SHA1

fb21dbd3c59bce2cff4a7908d04d213116b0dabe
SHA256

0129a34b79cbf779c842b15d3642d430237aa7ad963d5ed938c565588e2ecafe
SHA512

3bd35a380b7f8d9b260a2dcc58790cc57e09ac868af85c274567b25c8d70331c518ed08de4797d4f515e28f24aeb3e7d0daf82b8256c151ead32bc5aabcf772b
SSDEEP

1536:MD7DL7tc4108tdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsrYNkWLnxtVlnGMpG:MD7DLhNHtdgI2MyzNORQtOflIwoHNV2J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0129a34b79cbf779c842b15d3642d430237aa7ad963d5ed938c565588e2ecafe

Files

0129a34b79cbf779c842b15d3642d430237aa7ad963d5ed938c565588e2ecafe
.exe windows:5 windows x86 arch:x86

5cdbf67e6579af610fcd31f176bbd81c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadCursorA
LoadIconA
SendMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
LoadBitmapA
FillRect
BeginPaint
DispatchMessageA
EndPaint
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
GetDC
GetWindowRect
KillTimer
SetWindowPos
TranslateMessage
SetTimer

kernel32

GetModuleHandleA
GetCommandLineA
GetLastError

gdi32

TextOutA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ