0428d09ad4ff9e81cf7d978e13f0a00b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0428d09ad4ff9e81cf7d978e13f0a00b
Size

12KB
MD5

0428d09ad4ff9e81cf7d978e13f0a00b
SHA1

7f8a91e5edf416d8d8c756870557c4a32d3e6677
SHA256

e058b6d4d94d819b344ecc8fd9ac62cc2fb3f333f0cc6efb9b821d0f55504b8a
SHA512

cde97cd6c4a8e427ae078e704e10814c66b5d4baebc4fa3ef642e27051731197f428fb765ea491c98ab83cb712aa27ab3684bc9395decf262bceaa6a2df3d9da
SSDEEP

192:c5EbF+XeCfYgllv5t0s6ZFhbH6ttOX8X2X+6cOEP1oy:a6FCeTgjREFhbH6nOg2X+6cz1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0428d09ad4ff9e81cf7d978e13f0a00b

Files

0428d09ad4ff9e81cf7d978e13f0a00b
.exe windows:4 windows x86 arch:x86

4d5ffb3e78032b29e96bfa99d8ef0b2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
GetVolumeInformationA
GetTempFileNameA
Sleep
GetModuleFileNameA
GetTempPathA
CreateProcessA
GetTickCount
ExitProcess
CreateThread
GetLastError
CreateFileMappingA
GetModuleHandleA
GetStartupInfoA

msvcrt

fclose
ftell
fseek
fopen
toupper
fread
strcpy
calloc
_except_handler3
malloc
atoi
fputs
strlen
strcat
rand
strstr
strrchr
strcmp
memset
strtok
srand
__argv
__argc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
fwrite
_strdup
_strcmpi
_unlink

Sections

.bss
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE