29403c8a063a051ad809dfbffdadca70N[.]exe | Triage

Sharing

General

Target

29403c8a063a051ad809dfbffdadca70N.exe
Size

28KB
MD5

29403c8a063a051ad809dfbffdadca70
SHA1

db8ba25e4dde2d910d1718726483ff066a18eff4
SHA256

e70986f9519731ab57e4afb682538abeee79ad5ebc82207cfa00589da8d82ae8
SHA512

77b410628c64a94a0c08148481de5d0f65222b844bf9003fa2836d017601eae2fcc81862f7d38e62550ffea3d0127e6c560f440af3f21416cf424decb1d3907e
SSDEEP

384:6xaP8tE7bJDSxx5cLes01hUnOvKaP9NbBFiq8sSr7xkZl6YQ93IRH7h:+aP8yDSxLD2nOyaPbIWOCRH7h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29403c8a063a051ad809dfbffdadca70N.exe

Files

29403c8a063a051ad809dfbffdadca70N.exe
.exe windows:5 windows x86 arch:x86

2a71d4f31a0049abe53363fda443e30e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipBitmapGetPixel
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipFree
GdipAlloc

kernel32

HeapFree
FindResourceA
LoadResource
SizeofResource
LockResource
GetProcessHeap
HeapAlloc
CreateFileW
WriteFile
CloseHandle
lstrcatW
OutputDebugStringW
FreeLibrary
GetCurrentProcess
GetProcAddress
LoadLibraryW
LoadLibraryA

user32

UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DefWindowProcW
InvalidateRect
PostQuitMessage
SendMessageW
GetMessageW
wvsprintfW
EndPaint
FillRect
GetClientRect
BeginPaint
DispatchMessageW

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ