29602f9426ae0f61479e1060476ac200N[.]exe | Triage

Sharing

General

Target

29602f9426ae0f61479e1060476ac200N.exe
Size

63KB
MD5

29602f9426ae0f61479e1060476ac200
SHA1

85f2d76dd7a34e1689c6183e49677120c04fe3d9
SHA256

4fe14224905e0fdaa18454039a219de26b8b87afd64a09f028f3451bcfc46822
SHA512

e7370abac648f649984145ad117fd1935e3de665adebf9a7d29398a9ba3007022ef6497654a6d7d0c20f7c98beaba30e2b62f561bb03092e590d0bc02b0fafb4
SSDEEP

768:dhPs5xOj9XVNGw6BmsLj7eDcz+UcPOFYgChiM+0X9SrcKNU4cZp4f9H73ohvDzMR:dNhXA/+Uh+1PNSoY80H73oBqLvtx/vln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29602f9426ae0f61479e1060476ac200N.exe

Files

29602f9426ae0f61479e1060476ac200N.exe
.exe windows:4 windows x86 arch:x86

211eeda3f2203a6769bea8a2251cf793

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
VirtualFree
_llseek
GetProcessIoCounters
GetWriteWatch
SignalObjectAndWait
K32GetModuleBaseNameW
WriteConsoleOutputCharacterW
GetGeoInfoA
SetCachedSigningLevel
RegLoadKeyW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE