828f6d8101bf9dba0b0072aaa552967563374ce9d78305d4b918da19c07e4673 | Triage

Sharing

General

Target

828f6d8101bf9dba0b0072aaa552967563374ce9d78305d4b918da19c07e4673
Size

391KB
MD5

10680dae13e3ed59a067eb1144d779e1
SHA1

20a92d06854639babaf817137468842595263d9f
SHA256

828f6d8101bf9dba0b0072aaa552967563374ce9d78305d4b918da19c07e4673
SHA512

d3b9ba5403fcb348e963200391353f8e9d7cc0403171bce997fe932e9502b56ec40399e8ef2a9126b7e90bcf713567b3a6521395f82a5e5639ced00bba947513
SSDEEP

6144:AkihHE1k5pBJ3uOYfN2ZracsshcfXnULBARPeQ+V81xWr3os:ApHEm5DY3M8ipLBgPeZC4rN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
828f6d8101bf9dba0b0072aaa552967563374ce9d78305d4b918da19c07e4673

Files

828f6d8101bf9dba0b0072aaa552967563374ce9d78305d4b918da19c07e4673
.exe windows x86

fb7244e08b464af53f8cfc18d60f60c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

comdlg32

GetSaveFileNameA

Sections

CODE
Size: 247KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE