29b36bacff7284f02e8ebab5ff39c6cf2302cb82a4b513b73d1b2d011457fa60

General

Target
29b36bacff7284f02e8ebab5ff39c6cf2302cb82a4b513b73d1b2d011457fa60
Size 138KB
Sample260905-ppb5radh49
SHA256 29b36bacff7284f02e8ebab5ff39c6cf2302cb82a4b513b73d1b2d011457fa60
MD5 2961db43a861bcdde93a247c6603b9b8
SHA1 e5c4705b566925150f673697898efd9ae441eb82
SHA512 3c5ff728c3220d4ae502811a0da4d8c72c06c1a8d39b3e6516fd23a3c38d23c13fc2948c9949534bc9f4212985cbb2422d6a69c101615a05cc7b1032e4137ff3
SSDEEP 3072:9tvmssssq4WxB4ti7IqqPiyVuSP4e7vFc0PQBh7kHBdzL:Dessssql4trqKV94KUbMRL
TLSH
T1DBD36D24F9C3E033D5BB0C3155A49A659E2EFCA14F9069DB77880DFA0E349C18B3A957
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29b36bacff7284f02e8ebab5ff39c6cf2302cb82a4b513b73d1b2d011457fa60

File Explorer

29b36bacff7284f02e8ebab5ff39c6cf2302cb82a4b513b73d1b2d011457fa60

.exe 138KB

29b36bacff7284f02e8ebab5ff39c6cf2302cb82a4b513b73d1b2d011457fa60

IMPHASH 751a129b84af6226b2c6a831a4a27342
SHA256 29b36bacff7284f02e8ebab5ff39c6cf2302cb82a4b513b73d1b2d011457fa60
MD5 2961db43a861bcdde93a247c6603b9b8
SHA1 e5c4705b566925150f673697898efd9ae441eb82
SHA512 3c5ff728c3220d4ae502811a0da4d8c72c06c1a8d39b3e6516fd23a3c38d23c13fc2948c9949534bc9f4212985cbb2422d6a69c101615a05cc7b1032e4137ff3
SSDEEP 3072:9tvmssssq4WxB4ti7IqqPiyVuSP4e7vFc0PQBh7kHBdzL:Dessssql4trqKV94KUbMRL
TLSH
T1DBD36D24F9C3E033D5BB0C3155A49A659E2EFCA14F9069DB77880DFA0E349C18B3A957
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

45133

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\MyCode\gameMaster\InstallAndUninstall\bin\Inst\Release\Install.pdb

kernel32

CreateFileW WriteFile CloseHandle WriteConsoleW LocalFree FormatMessageA GetLocaleInfoEx InitOnceBeginInitialize InitOnceComplete CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetLastError GetModuleHandleW GetProcAddress GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetCPInfo GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetStringTypeW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

29b36bacff7284f02e8ebab5ff39c6cf2302cb82a4b513b73d1b2d011457fa60

kernel32

generic