f28f3dff8d5af032428df34f03fcd2d4f1d8e2f74c53f2c63d0ec6027aa94699 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f28f3dff8d5af032428df34f03fcd2d4f1d8e2f74c53f2c63d0ec6027aa94699
Size

25KB
MD5

86df3f2d1d5936ba04d60c1581d4aa79
SHA1

29253bca00aeb38abaf9afbfe49ca343454008bf
SHA256

f28f3dff8d5af032428df34f03fcd2d4f1d8e2f74c53f2c63d0ec6027aa94699
SHA512

12680afb1f0b91ff874338f17856c710a0064b01b094a26fb990788a37a91841184f59c4b5b245dfd8a4be2bcb4f9070d7a090fad1a39c3a8593ba2f685f060a
SSDEEP

192:B7fSByfG8hwa2XLpKhyZhZ/CJRBDHghmznnnnnn:8ByfG82a2XLpQsX/CJjshm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f28f3dff8d5af032428df34f03fcd2d4f1d8e2f74c53f2c63d0ec6027aa94699

Files

f28f3dff8d5af032428df34f03fcd2d4f1d8e2f74c53f2c63d0ec6027aa94699
.exe windows x86

a974ea4b5ac835c0872cd8b405d6ce60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sprintf
_ftol
modf

kernel32

ExitProcess
WritePrivateProfileStringA
GetModuleFileNameA
IsBadReadPtr
HeapFree
HeapAlloc
GetModuleHandleA
GetProcessHeap

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

5pMϣu
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE