28b36f3dafee130751baf7ec8295b148 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28b36f3dafee130751baf7ec8295b148
Size

75KB
MD5

28b36f3dafee130751baf7ec8295b148
SHA1

9d01327bbe3f8c5fefdd1af59584ba7f276aa6ac
SHA256

1f4b500d339fc23f4bbaafa699c6ac11cac4d5cd9543b7a4ef2ed3183c48a393
SHA512

4f86741f746df5badc0fe9f95e7320983a76856ea721057ce3c5c8e30f5ac0bb57e6b5af32248ffeb91d0aad2837273a428479cb76f84c0ba57b1dee2ccf6137
SSDEEP

1536:4N3+M6+PGs0wujH0OEbhg0O7gtJwZkCFBj4IRgPTA+vwp0:64mGHTjH0OEaZjjbkA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28b36f3dafee130751baf7ec8295b148

Files

28b36f3dafee130751baf7ec8295b148
.exe windows:4 windows x86 arch:x86

193b08c48ae198069192ca6590bd0344

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadImageA
GrayStringA
IsCharLowerA
GetWindowDC
GetSysColorBrush
HideCaret

wininet

UnlockUrlCacheEntryFile
InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
InternetSetDialState
ShowSecurityInfo

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

strlen
_cabs
__wargv

Sections

.text
Size: 46KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE