28358e770813c007b5920416ca941b34

Sharing

Copy URL Twitter E-mail

General

Target

28358e770813c007b5920416ca941b34
Size

216KB
MD5

28358e770813c007b5920416ca941b34
SHA1

6d7491d41b6abab926c8c43b507dbd912048e782
SHA256

704dcf69dbaed3524ac9bcca4c4fcc4293a2d05b3b32a738b35c3d517cb851f2
SHA512

088cd1166652cb9a1265d6133d1b9acc1971fd9adfc0b7db5555cf6621cf1a6907f217e400e5ef9dc7032a60f380733f21dc5fcf57f21b7db175d862c8180ee4
SSDEEP

3072:/hEtaGLQfOhqJluKChID46ZG+z1UTcoHANGnLqPFOatU:/hJcQfVJluKCI3QvWPFy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28358e770813c007b5920416ca941b34

Files

28358e770813c007b5920416ca941b34
.exe windows:4 windows x86 arch:x86

40234b7e13ee5f900ddd544981818674

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

secur32

InitializeSecurityContextW
RevertSecurityContext
FreeContextBuffer

comctl32

CreateStatusWindowW
ord17
ImageList_SetOverlayImage
DestroyPropertySheetPage
ImageList_LoadImageW
ImageList_Destroy
CreateToolbarEx
ImageList_Add

kernel32

GetOEMCP
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetACP
WriteConsoleW
lstrcpyW
VerLanguageNameW
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoW
GetVersion
RtlUnwind
RaiseException
FatalAppExitA
HeapReAlloc
HeapSize
GetLastError
CloseHandle
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
WriteFile
GetModuleFileNameA
FlushFileBuffers
WideCharToMultiByte
SetUnhandledExceptionFilter
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetStdHandle
CreateFileA
GetProcAddress
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
ReadFile
GetStringTypeA
GetStringTypeW
SetEndOfFile
SetConsoleCtrlHandler
GetTimeZoneInformation
GetLocaleInfoW
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 903KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40234b7e13ee5f900ddd544981818674

Headers

File Characteristics

Imports

secur32

comctl32

kernel32

Sections

.text Size: 92KB - Virtual size: 88KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 80KB - Virtual size: 903KB

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 92KB - Virtual size: 88KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 80KB - Virtual size: 903KB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 8KB - Virtual size: 6KB