1428f4616d7f7025866d77255162ce44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1428f4616d7f7025866d77255162ce44
Size

163KB
MD5

1428f4616d7f7025866d77255162ce44
SHA1

ff4af336a8d35abe3b4707ebd3d1673e1b136188
SHA256

6cbab0a8e0d8a3b776fef9b66592e196081dc211746aa584f082ada0240fdb83
SHA512

3e8e1cf76d2a73d84d07604869882885fc9e7b95d249572b83378c8a9790a475bc9f5bd336663763aaaa8cd19c16c0bfe0879db44429bb5d0a625b059ed42b98
SSDEEP

3072:4pMuHR1NMRWj9Q1TX1Vqf0h0Tfc7Qiz0ZCRnKBforsVvB3cQA+vLori:4pMWQ89Q1j1wMhKKz0wRnKBAiBtvLmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1428f4616d7f7025866d77255162ce44

Files

1428f4616d7f7025866d77255162ce44
.exe windows:4 windows x86 arch:x86

6c322961e8eff4d07998b7129250e75b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GlobalFree
ExitProcess
GlobalAlloc
GetModuleHandleA
Sleep
FreeLibrary
GetProcAddress
GetStartupInfoA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA

msvcrt

malloc
strlen
memset
strcmp
strcpy
realloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strstr

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ