28aa18dc7ecf4f4aa8e3cab81990a356

Sharing

Copy URL

Twitter E-mail

General

Target

28aa18dc7ecf4f4aa8e3cab81990a356
Size

430KB
MD5

28aa18dc7ecf4f4aa8e3cab81990a356
SHA1

4e885ca64fe693ac4c5029a9faf1fb482a59d650
SHA256

1917b94d3f7f944a22f04ec6a7c0b56ac49ea3702d557c15fa2e1ff217dce604
SHA512

58fdd2a69f00d9b5a81b37722b9d45184228c517154e7d19d1410dfe917f8a6e7925e6cbef573ef62c0e4fcff4f03ab4f7788afe46ce1a221d45bbf52aff766b
SSDEEP

12288:fqRjznrCtivI2v3pVVBaoiPxQbYqKj7l/7b2:fql5A2BVVcocSC/l/7a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28aa18dc7ecf4f4aa8e3cab81990a356

Files

28aa18dc7ecf4f4aa8e3cab81990a356
.exe windows:5 windows x86 arch:x86

b19391f696f547b84a25b9b8234b1bea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42u

ord823
ord825

advapi32

RegQueryValueExA
RegisterEventSourceA
ReportEventA

ole32

CoCreateInstance

oleaut32

SysAllocString
VariantClear
VariantInit
SystemTimeToVariantTime
SysFreeString

user32

GetDlgItem
wsprintfW
GetWindowLongW
LoadStringW
wsprintfA
EndDialog
GetFocus
GetWindowRect
LoadStringA
SendMessageW
SetWindowLongW
DialogBoxParamW
UpdateWindow

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.upx
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.upack
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspack
Size: 402KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.usa
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b19391f696f547b84a25b9b8234b1bea

Headers

DLL Characteristics

File Characteristics

Imports

mfc42u

advapi32

ole32

oleaut32

user32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 4KB

.upx Size: 1024B - Virtual size: 4KB

.upack Size: 1024B - Virtual size: 4KB

.tls Size: 1024B - Virtual size: 4KB

.aspack Size: 402KB - Virtual size: 404KB

.usa Size: 1024B - Virtual size: 4KB

.rsrc Size: 11KB - Virtual size: 40KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 4KB

.upx
Size: 1024B - Virtual size: 4KB

.upack
Size: 1024B - Virtual size: 4KB

.tls
Size: 1024B - Virtual size: 4KB

.aspack
Size: 402KB - Virtual size: 404KB

.usa
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 11KB - Virtual size: 40KB