c29acb74dbce0c6de96638c64b9bf5e75e58ca290e52950d414e07b02e45c109 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c29acb74dbce0c6de96638c64b9bf5e75e58ca290e52950d414e07b02e45c109
Size

453KB
MD5

60b2efdf2537106392bbffe30b5f40b3
SHA1

143278a1caa90c1ea40e8a776006eb65fc73ef48
SHA256

c29acb74dbce0c6de96638c64b9bf5e75e58ca290e52950d414e07b02e45c109
SHA512

e7459be3e973c52ab729f3ddd68202f13af0b7055ef87e06ea86666ce0236128ab4279a47cb154af7a8c16f3447d4533cb417173dd99f84dd0eafc443180bd30
SSDEEP

3072:SjCk0l2UkVyN5iLRTvTfy78+mk5ZwfcT//jvMTUyOjVifpx:SjW2+58vTfP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c29acb74dbce0c6de96638c64b9bf5e75e58ca290e52950d414e07b02e45c109

Files

c29acb74dbce0c6de96638c64b9bf5e75e58ca290e52950d414e07b02e45c109
.exe windows:4 windows x86 arch:x86

2eda502d39734c2a70c5e0d029966397

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ