028e40cefab8c152b3ee1fd2c84f17b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

028e40cefab8c152b3ee1fd2c84f17b2
Size

2.2MB
MD5

028e40cefab8c152b3ee1fd2c84f17b2
SHA1

410f1eb216c6c1c85d82ff92312e47f1873a1fa8
SHA256

20d6020cea32f86d3336a5d9397ff0f25d649d37e5322c05cc7f8920efeadf91
SHA512

1946ca0d755778683ee3876782bf505227e073d7af3ed0bf134192d59704c6efe796f76dd2b27927ae639666c2643e166c0b740a0b7e11f6f1dafe315ed7039e
SSDEEP

49152:TxquIrkDZt+TzecOiN0RBLHM87pkgRRWPh:TxqkDZhcOhLs8nfW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
028e40cefab8c152b3ee1fd2c84f17b2

Files

028e40cefab8c152b3ee1fd2c84f17b2
.exe windows:4 windows x86 arch:x86

1af04517b20cf51dd5ad5c5483b1d742

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

shell32

SHGetFileInfoA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

Sections

CODE
Size: 2.0MB - Virtual size: 26.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE