28a0b58796c59cd2d25625e6a831a7fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28a0b58796c59cd2d25625e6a831a7fb
Size

212KB
MD5

28a0b58796c59cd2d25625e6a831a7fb
SHA1

638c240c367719a71b24c54555f1f6c91611203b
SHA256

bdcca081472d4366d682d91f22978629941067887f99e9aebc23e695eaa76c51
SHA512

ba6a3fac13f632383f3368eea3547e6435c403bc70e196603b2988033a571871a9fb66c3f56d674d23ee5f02ed0bb6d06873dcf7810651ac76490a5abbb602c6
SSDEEP

6144:WyHJlMoj9t+J00ykLvIWGYDhFD7iSVZSe7HRCN:WoJqE9t+J00ykbIWGYDvDWFeVk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28a0b58796c59cd2d25625e6a831a7fb

Files

28a0b58796c59cd2d25625e6a831a7fb
.exe windows:4 windows x86 arch:x86

75654cf2e66c57bb2254d7afab833a69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
ExitProcess
GetCurrentProcess
LoadLibraryA
LCMapStringA

user32

CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
CreateWindowExA

advapi32

RegOpenKeyA
RegCreateKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegEnumValueA
RegSetValueA
RegCloseKey
RegDeleteValueA

Sections

.text
Size: 165KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ