28a07aae9b2ee66432ffe7f64a1c44b7 | Triage

Sharing

General

Target

28a07aae9b2ee66432ffe7f64a1c44b7
Size

94KB
MD5

28a07aae9b2ee66432ffe7f64a1c44b7
SHA1

33922dea07a7fe512e02208eba5c76294aafa1eb
SHA256

65107f2062fdb116ebdca4b3631e483fe8cdc8a19e31dac2274a47be700e0143
SHA512

6ae72469fcf5536c9f6faa04c4cbe8c27c3eb10640344df3c62b115544e2abb99eb5b1f5a77b24616d478d23b52c86ba2010c25e3fa81d23cbd4c70e52886cbc
SSDEEP

1536:RzS/6HacmkVBVqwe3BzKDOgSiQ+0fHB12XB4VWoNCsgQB9xinRIw/OvhBQD9FcTn:RE6HaA6AOxfHmcrgegRSvQXcTYUYsBr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28a07aae9b2ee66432ffe7f64a1c44b7

Files

28a07aae9b2ee66432ffe7f64a1c44b7
.dll windows:4 windows x86 arch:x86

d107b47a6994fe2d14e9e2821296c08c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
UnmapViewOfFile
WriteFile
lstrcatA
lstrlenA
ExitProcess

Sections

.sforce3
Size: 26KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ