28ed8ee9ed926ba3a352a50c8d398c3ae9fa3ae31eb8e251a51290fabdeb7e4e | Triage

Sharing

General

Target

28ed8ee9ed926ba3a352a50c8d398c3ae9fa3ae31eb8e251a51290fabdeb7e4e
Size

657KB
MD5

e5101721b750c94cd9cf8b00ff2c3b74
SHA1

9ba2d826de667de9d39676d182f47d8b5f46c3de
SHA256

28ed8ee9ed926ba3a352a50c8d398c3ae9fa3ae31eb8e251a51290fabdeb7e4e
SHA512

dd49d745cc88f44de9e3c6af33abf0ee60b68d09f742514dd0f09ad7450e85ae77b119d0667063093390fa3c12ad0e087c58f85cb45f95426b7c7884142055d9
SSDEEP

12288:zhkZ5zorNmfojSAijri5MHgBrxaIXzqe2w7yHGqxUb+FHV2sNwsII1kDY:zK/zorNm1u5LhxBDq6wGJbI+sI8kDY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ed8ee9ed926ba3a352a50c8d398c3ae9fa3ae31eb8e251a51290fabdeb7e4e

Files

28ed8ee9ed926ba3a352a50c8d398c3ae9fa3ae31eb8e251a51290fabdeb7e4e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 654KB - Virtual size: 654KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ