28fd6dd5149505a783d40c7d6bf6dd59384d86f90e0b221f5ca7521320850950 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28fd6dd5149505a783d40c7d6bf6dd59384d86f90e0b221f5ca7521320850950
Size

1.3MB
MD5

2e0c84001f623023c3d5374fd9d3f7d0
SHA1

f2f0c761e8fcf494c1ecc21762ddfbeac8a56da7
SHA256

28fd6dd5149505a783d40c7d6bf6dd59384d86f90e0b221f5ca7521320850950
SHA512

f7e65b6023f99d73782843273f98f5505b1037714df73663aabfa59ecc9bcd7377d479e34b53db3332a316eba84762858e24132448a85cf2405b2a88260335b3
SSDEEP

24576:hhszn9rHJ6nLfJiAsALQwZCkh6doIVI+I5EdEoOUIm94nE90:A9N0zJnVQwZl0N8EAUI3ne0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28fd6dd5149505a783d40c7d6bf6dd59384d86f90e0b221f5ca7521320850950

Files

28fd6dd5149505a783d40c7d6bf6dd59384d86f90e0b221f5ca7521320850950
.exe windows x86

de39dc68941cc6307e3b2590c857a907

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 1018KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 158KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE