28b3b4e8bdab64df31870ee7dac11fd0 | Triage

Sharing

General

Target

28b3b4e8bdab64df31870ee7dac11fd0
Size

48KB
MD5

28b3b4e8bdab64df31870ee7dac11fd0
SHA1

6ed59425fa2aa18da31eab1f749b4d49ea049881
SHA256

56044d3dc664d3ba6d0f0becc83d8ea831960d7601718bd90498a5b214996e3b
SHA512

fd3799f1326f07130723d84768571d387d9c82b383912a87d2283eb7c43a335c2c7c81509004dbe4db68f2bc885f7dc435aad79150e2ee4336bba87442d87031
SSDEEP

768:msw16PO2x4eTJZALG5AvUB14t8ytO8IfQLEIJPvLqI2WYBZHP7+kKiFbjuVV:m5WxnTJZSc4t89z8E87f23v7xKiRAV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28b3b4e8bdab64df31870ee7dac11fd0

Files

28b3b4e8bdab64df31870ee7dac11fd0
.exe windows:1 windows x86 arch:x86

0fbe170c66daeeaecfae058ff260563e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

LoadStringA
MessageBoxA

advapi32

GetFileSecurityA
GetMultipleTrusteeA
GetServiceDisplayNameA
GetServiceKeyNameA
QueryServiceConfigA

Exports

Exports

Xqsfsv
Zdhwvd

Sections

.text
Size: 1024B - Virtual size: 567B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE