028b7d266fb21afa2520168eca5a1f6f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

028b7d266fb21afa2520168eca5a1f6f
Size

90KB
MD5

028b7d266fb21afa2520168eca5a1f6f
SHA1

b8615aa78baf9fb71264465cfeb5ea16725fa45c
SHA256

73ebb46edd7467a686d8eb4352ad8f6f49ebfece108e6b5747603d3cf668d0b9
SHA512

be57093897cd6005d203ba4063d80c4f9285d4dc4bf705d678bbcaa20b8a27b06b527eb256cb82fac9379df1181d4adb36d2e82cda090c3fd0ab81ae1ba58c5a
SSDEEP

1536:IRzjZmEnutefUwUuoZzUl+JVuJV3p917/:uZmgFUjjhUlMVuJV3p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
028b7d266fb21afa2520168eca5a1f6f

Files

028b7d266fb21afa2520168eca5a1f6f
.exe windows:5 windows x86 arch:x86

cde20c5bd58aae3829ec588dbaeb5360

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawIconEx
GetWindowTextLengthA
CopyImage

advapi32

RegOpenKeyA
RegCreateKeyW
RegDeleteKeyW
RegGetKeySecurity
RegQueryInfoKeyA

kernel32

CopyFileA
GetFileType
ExitProcess
HeapAlloc
ExitThread
GetCPInfo
GetPriorityClass
FlushFileBuffers
HeapFree
WriteFile
GetLocalTime
OpenFile
GetStdHandle
GetLastError
FormatMessageA
FreeResource
lstrcmpA
DeleteFileA
lstrcatA
CompareStringA

Sections

.eecd
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.7h1d
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0f17
Size: 43KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.g2h5
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hba03
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ