00e28b053a7a32e8011a2719bb94624e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00e28b053a7a32e8011a2719bb94624e
Size

48KB
MD5

00e28b053a7a32e8011a2719bb94624e
SHA1

6675feb1a4f7cac76dbc564ee564bf23723041cb
SHA256

27cc6081c8469650ecb35f61bc18de22e00aa63b67665a3df811e88f240f8def
SHA512

d5073d900f4e2df80fac2399259d12c1c6f9a4837081f0190b8f3a0bd97b039cafab15f2570a3dc2eef138c860407b5b6f8028e12e72c8351ce05f05c8a01c19
SSDEEP

96:jOV+dxKqRO7TZvFY4hNDXMyMtQAG38nqejAY38nqUhWCTF:ddxe7TZe4hNDXM/AsnqejlsnqUhWCx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e28b053a7a32e8011a2719bb94624e

Files

00e28b053a7a32e8011a2719bb94624e
.exe windows:1 windows x86 arch:x86

cb3fd5251ba1a9338893c0890811dc26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
ExitProcess

user32

MessageBoxA

Sections

CODE
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TechnoK
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE