7ff29cb880aee6b87bc131408d140b0c0b8c7b347fb2b961885a9607e44ac3f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ff29cb880aee6b87bc131408d140b0c0b8c7b347fb2b961885a9607e44ac3f7
Size

320KB
MD5

428c2788d730109ace2b03e39bf6526e
SHA1

00c320a4b921842dfba9821ae45fa0be33a57f3f
SHA256

7ff29cb880aee6b87bc131408d140b0c0b8c7b347fb2b961885a9607e44ac3f7
SHA512

c522afecdc2117e4b693a2b9890cb65518be1dc8490406b4b94c412777692d0dedc830f295fad2dbb8e163dd1ae08857c0f334e7452165d5d99b2d89819e714e
SSDEEP

6144:WGyq8masH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:WGyA12EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ff29cb880aee6b87bc131408d140b0c0b8c7b347fb2b961885a9607e44ac3f7

Files

7ff29cb880aee6b87bc131408d140b0c0b8c7b347fb2b961885a9607e44ac3f7
.exe windows:4 windows x86 arch:x86

f529c3aaffc9b936cfda686e10c202b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessShutdownParameters
_hwrite
FindFirstFileW
CreateVirtualBuffer
SwitchToFiber
IsProcessorFeaturePresent
GetConsoleFontInfo
FindAtomW
FindFirstFileA
SetCommTimeouts
CloseHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE