28116a48a5dcccc1d0d91d5b6b09e9e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28116a48a5dcccc1d0d91d5b6b09e9e6
Size

354KB
MD5

28116a48a5dcccc1d0d91d5b6b09e9e6
SHA1

94a7c01b1389669928e4b66b24ef161f2364ca16
SHA256

2ccae4be47af1185447e64de3363e2479fe90f62bfd385320f43986a623eadf5
SHA512

146cc178ed6f5c7ac61c70893e5bf57683fbeaeee650bb97ce41969c1bd0b48694ffcf90fcf5cb0a21e9fee6ed96e50a3e4d27b4745fdb3d501ebfcaf1895ab1
SSDEEP

6144:+jypF7wEWon8TYdjIdi59Uu1lSY6mIexb5j39XTBQi5q8H:NbwEWy8TYuKqu1H6mIel5j39XTxp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28116a48a5dcccc1d0d91d5b6b09e9e6

Files

28116a48a5dcccc1d0d91d5b6b09e9e6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ