1d2f28cf3c882b20bf89f509b5ac0dcf | Triage

Sharing

General

Target

1d2f28cf3c882b20bf89f509b5ac0dcf
Size

28KB
MD5

1d2f28cf3c882b20bf89f509b5ac0dcf
SHA1

139d6c0e1ee3a5183022250b0792d64acdff2fe2
SHA256

4bb189f3e863bf0546f2e7661078ead8839dcebb050f7ef2682a1f1cf773251f
SHA512

952eeed27987a66386c93632a86387a7ed41e259f1494cde214c29d1c093bc3936a5ddb149a2aebc8e5c823c88cab7bf6e03c2d2a44c4e9e07eb547b6528dd55
SSDEEP

384:UmOyMLjKMPH1Dxw7ZA8l9ZoA7k+w9G5hmssR0IkR46nzojn8mgRRtssIeo/r5J1+:hUjKVjl9xw3x6nz7vj1wrw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d2f28cf3c882b20bf89f509b5ac0dcf

Files

1d2f28cf3c882b20bf89f509b5ac0dcf
.exe windows:4 windows x86 arch:x86

28c6ef1128d2dc0d513ddf64919b7716

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ