29b9bdfe86954b210f55e1f456f14530N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29b9bdfe86954b210f55e1f456f14530N.exe
Size

63KB
MD5

29b9bdfe86954b210f55e1f456f14530
SHA1

cb0034360cc0d917eb4335d8c2f945fb810456ca
SHA256

6724d3b179005f817a2804c19a681e75009a0d19e43c39ba9957341d3ff04a9f
SHA512

67bdbed2cb371df35692f4544c52d1f23524911107628a3a067b87f42ecaa3a7a5c0a3ab3854e7285130439b60ea07b73ad27e3d5e78c6526b06299d8eaf943b
SSDEEP

1536:9c1131uz0GDTHIBcyN2oE9/aaV8/932oANnrShxc:9w8VPNrY32oY5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29b9bdfe86954b210f55e1f456f14530N.exe

Files

29b9bdfe86954b210f55e1f456f14530N.exe
.exe windows:4 windows x86 arch:x86

545153fad876bc3e5134635cc33d0b4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOverlappedResultEx
HeapSetInformation
SetFileAttributesA
MapViewOfFileFromApp
PeekConsoleInputW
GetProcessWorkingSetSize
EraseTape
SetProcessPriorityBoost
CreateSemaphoreExW
GetEnvironmentVariableW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE