29778ce005155345038df5417ea2ec629d2cb01aa10d723c87bcf447d0995fdb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29778ce005155345038df5417ea2ec629d2cb01aa10d723c87bcf447d0995fdb
Size

22KB
MD5

180cd03b1310a5c76ecd875a1ff42ed1
SHA1

ffc22b045378f770cc8cead1ff7ea7cd78ec2ab9
SHA256

29778ce005155345038df5417ea2ec629d2cb01aa10d723c87bcf447d0995fdb
SHA512

80fb5206aaca204dd5f041a596b6189fbc3a2e4be390ca911c2b85a028b27658216435746759dc7f47d0c00dad3cc93b2201d7101cff21818b4495cb0c8fcb40
SSDEEP

384:feReh7uFN3HS1XZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:f8kOyrQGPL4vzZq2o9W7GsxBbPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29778ce005155345038df5417ea2ec629d2cb01aa10d723c87bcf447d0995fdb

Files

29778ce005155345038df5417ea2ec629d2cb01aa10d723c87bcf447d0995fdb
.exe windows:4 windows x86 arch:x86

951b651c716fb81414aa59b65e4cc425

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zhao
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bb�u�
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE