c29f969a3e42ec3536b73f79a41179bb31b9a0adb0698e4bbbeb9a5f07450091 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c29f969a3e42ec3536b73f79a41179bb31b9a0adb0698e4bbbeb9a5f07450091
Size

44KB
MD5

e9c4de490818b1265439ad0543f8064a
SHA1

0782546261ed4c94e640b40d7485723abc51c740
SHA256

c29f969a3e42ec3536b73f79a41179bb31b9a0adb0698e4bbbeb9a5f07450091
SHA512

01d64dee8cd2f0b0c552a120a2c80a13733b879a47276be9f5be3e73cd365a87dfe3067d91976afc7a1db3474459bb53f19012923a60a54cbde45bf27b936738
SSDEEP

384:PbZgNhXiYRwcvsij14udndv7RV1ues2gXk3lkB+SCHGm3ZwWgZW6:TZ/KwcvsijOqvz1uesvikB3Hp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c29f969a3e42ec3536b73f79a41179bb31b9a0adb0698e4bbbeb9a5f07450091

Files

c29f969a3e42ec3536b73f79a41179bb31b9a0adb0698e4bbbeb9a5f07450091
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wab.pdb

Sections

.text
Size: 16KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA