28bd2f6cf3be54b6e327e138ab77a2d2 | Triage

Sharing

General

Target

28bd2f6cf3be54b6e327e138ab77a2d2
Size

7KB
MD5

28bd2f6cf3be54b6e327e138ab77a2d2
SHA1

80a050b5bb1109ed1658fe5a3fab14efd9f8f8da
SHA256

6e03bb842f310100ddaf188671b4866b7f6db3012ae676cbcafdefcc389c15c2
SHA512

49d9e86a16510d65493ea3731755c0afe68b31a9dcd160299031a88b187e49ade2b5838013a53d2ab7e81e9ada7e42cd60e605aee03d5297901be1af6dafdb8b
SSDEEP

96:IF04XHsqJa2IyWuQ25p9Tn7hats0QC6Btgvg6oK04LEfkk33aLlYR:IF0wsqJa9ruQ25TwGzBtg0K04Vk3aY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28bd2f6cf3be54b6e327e138ab77a2d2

Files

28bd2f6cf3be54b6e327e138ab77a2d2
.exe windows:4 windows x86 arch:x86

a5f2aefc58375ca77caff4230aecbe91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

strlen
memset
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

kernel32

CreateProcessA
CloseHandle
SetUnhandledExceptionFilter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 379B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ