028c371edbd0c330b49e711d1c04f5c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

028c371edbd0c330b49e711d1c04f5c3
Size

233KB
MD5

028c371edbd0c330b49e711d1c04f5c3
SHA1

fe701291986ace6e16cfbf4b141abae2a2be4767
SHA256

2d1c40cc4c35eef7fd369964c162be87127a878306827ee1476cbf8aebd8f13c
SHA512

3875b591fb75d445cacc73c762fdb48860153ca7b2576876f91502dea76cee17401a0b2b79a4fc1a7ca4ded1a1c1323eae352ce3c15b3e0cc3b907bc3dde68a2
SSDEEP

6144:n9OA1dDQrgckZH0ixiPh7oQJpV0FTuitgjY1FP78KM:F1ugbmvJIyiW6FPh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
028c371edbd0c330b49e711d1c04f5c3

Files

028c371edbd0c330b49e711d1c04f5c3
.exe windows:4 windows x86 arch:x86

3440146c5ac6293acf310998d74767de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
MessageBoxA

kernel32

lstrcpyW
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess

gdi32

GetDeviceCaps

Sections

.text
Size: - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata0
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fdata1
Size: - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata2
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ