b28a4db7d6a8ae2f221070fefd196f4e893cc7af39017da6c61ac2449f5394ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b28a4db7d6a8ae2f221070fefd196f4e893cc7af39017da6c61ac2449f5394ed
Size

7.0MB
MD5

557b9ce152f1ae25a529ff59638eb621
SHA1

2a20e2d15c078608194535c02f6d37c744f30c9c
SHA256

b28a4db7d6a8ae2f221070fefd196f4e893cc7af39017da6c61ac2449f5394ed
SHA512

b39938450741801b6838363bb0b77fe74acfc8598ef634454cf478cb22d7a97fd0e170814a74e0470cda1f25bc942285c3e049419ad6ff10c2443d81c0b4e7cb
SSDEEP

196608:xkgpkCSM85cs+lzamVqIARzAXos3wcYM1dYoUAHEZCWacwErVke7Shyz8qUPISap:q0SMiSWPqK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b28a4db7d6a8ae2f221070fefd196f4e893cc7af39017da6c61ac2449f5394ed

Files

b28a4db7d6a8ae2f221070fefd196f4e893cc7af39017da6c61ac2449f5394ed
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 964KB - Virtual size: 961KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

lswang
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lswang
Size: 3.3MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lswang
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ