28ed199de3602a8f5c9d93812bf31d81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28ed199de3602a8f5c9d93812bf31d81
Size

109KB
MD5

28ed199de3602a8f5c9d93812bf31d81
SHA1

60645ce2d27a1ebc219c58204d19c3554ebf4346
SHA256

dd3bd83fa0a5ea41a4d3190cf431db5c04ad50ff446055d363ea8c7092c5ac6a
SHA512

68425a40e3d96e4a1e4afd50b6a92302ace01ae5ce431625bc5d4bf36e5dc9665df35570550fe5ee8fc4ff2ef0cc2a900ba9469403b5d372c46d50f9c513f63f
SSDEEP

3072:Mvo8VsYSrQ7F6wbiPHUOFp3ZnskGPIjj/yFIb:/QRi/UO73ZnTGPIjjZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ed199de3602a8f5c9d93812bf31d81

Files

28ed199de3602a8f5c9d93812bf31d81
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ