28a8c80433f6d54302b3df7bde378ebf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28a8c80433f6d54302b3df7bde378ebf
Size

6KB
MD5

28a8c80433f6d54302b3df7bde378ebf
SHA1

e8c4643d15e12067c020d88920dee4473b8d8deb
SHA256

cab9001a70c5995e7cfe0d05c67d6b2117cc0b5af7eb76527d885a6de57c7dba
SHA512

6faecc1ef1bf5b92639901516412d2b996e0435742000559b8ea6432db63b965512b296f5dda007e701d7ba668f5f6fc76896a9946938f197ab669a5d29c3b22
SSDEEP

96:YHlHkINLLmmM9Yjf+HaonwpPIk/hFL2L3nMp:UlHkJcIkm3nC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28a8c80433f6d54302b3df7bde378ebf

Files

28a8c80433f6d54302b3df7bde378ebf
.exe windows:4 windows x86 arch:x86

377640a070eee2677b0d102ba93f4354

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fflush
fgets
fopen
fprintf
free
fwrite
malloc
printf
setbuf
signal
strchr

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE