028220732dc4c8ad8caf827f86b78f3e

General

Target

028220732dc4c8ad8caf827f86b78f3e
Size

307KB
MD5

028220732dc4c8ad8caf827f86b78f3e
SHA1

2f07c85738979d79717086c960d2af65dfd1d7ac
SHA256

28be8864ef11bf452fb9cc0821fd46971e7392405f26516c008b2276d2348421
SHA512

36ac027da6d63846553f0e08014892487d3693b1a70c6f7295203125b5087f563fef6fc1cd75f77ed96f202630cca517c718fae8b249630fdf2acc3efe646ba2
SSDEEP

3072:GFRls5ZG5zU15M5iC+c7C8wa+Jl3760aziivK:GFWSzUbRc7CQ+Jl3760FN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
028220732dc4c8ad8caf827f86b78f3e

Files

028220732dc4c8ad8caf827f86b78f3e
.exe windows:5 windows

02c2e5c70b25cc82268592abcb496641

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptEnumOIDInfo
CertFindCRLInStore
CertDuplicateStore
CryptMemFree
CertGetNameStringA
CryptEncryptMessage
CertCreateCRLContext
CertAddCRLContextToStore
CertEnumPhysicalStore
CertFindChainInStore
CertAlgIdToOID

certcli

CAEnumNextCA
CADeleteCA

uxtheme

GetWindowTheme
GetThemeSysBool
GetCurrentThemeName
GetThemeBackgroundExtent
GetThemeAppProperties
GetThemeFilename
DrawThemeText
GetThemePosition
GetThemeSysSize
GetThemeSysInt
IsThemeActive
GetThemeEnumValue

mprapi

MprAdminBufferFree
MprInfoBlockFind

kernel32

GetConsoleAliasW
ReleaseMutex
GetBinaryTypeW
CreateNamedPipeA
GetLongPathNameA
CreateSemaphoreA
RemoveDirectoryA
WaitForSingleObjectEx
GetEnvironmentVariableW
HeapFree
LoadLibraryExA
IsBadReadPtr
GetCurrentDirectoryA
lstrlenW
FindFirstFileW
GetProfileIntA
GetProcAddress
LoadLibraryA

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data1
Size: - Virtual size: 84KB

IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02c2e5c70b25cc82268592abcb496641

Headers

DLL Characteristics

File Characteristics

Imports

crypt32

certcli

uxtheme

mprapi

kernel32

Sections

.text Size: 131KB - Virtual size: 131KB

.data1 Size: - Virtual size: 84KB

.data Size: 13KB - Virtual size: 13KB

.rsrc Size: 161KB - Virtual size: 160KB

.text
Size: 131KB - Virtual size: 131KB

.data1
Size: - Virtual size: 84KB

.data
Size: 13KB - Virtual size: 13KB

.rsrc
Size: 161KB - Virtual size: 160KB