28cdc13278569c21eb42c3d6ff5e09ba | Triage

Sharing

General

Target

28cdc13278569c21eb42c3d6ff5e09ba
Size

28KB
MD5

28cdc13278569c21eb42c3d6ff5e09ba
SHA1

34bea55f1920884ae803f649be32c8dd51a785fb
SHA256

761b3a1380fb93e55bb07b34dc28ae3d77ce0e9d22b111f4a60badc14aa5a689
SHA512

ce16e46c88801ae3898af20271370010e7fb0ad7513bd623e1dc38a802bad1eb906bac2cd2460dc6175f9342c4c02f4120e5fd6bf582bc51f11b8e769364634f
SSDEEP

768:wEbffIKvc1pMsnbvQD5W9H5HyrpEhrdzR3XxpZy:wOffIY45nbsY9kqdz3Dy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28cdc13278569c21eb42c3d6ff5e09ba

Files

28cdc13278569c21eb42c3d6ff5e09ba
.exe windows:4 windows x86 arch:x86

1704b3da33714fe13129d218f43cadde

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
CharNextA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegCloseKey

oleaut32

VariantCopy

wininet

InternetOpenA

Sections

.text
Size: 19KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE