28b6f63bd025b974c2c5e9639c535dd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28b6f63bd025b974c2c5e9639c535dd7
Size

9KB
MD5

28b6f63bd025b974c2c5e9639c535dd7
SHA1

122f5406bf634db3a40a89dc8e6d4eb166404211
SHA256

408e1472cd9e18361edc6b1b23031c467df736b08fd921fe764c843545881be6
SHA512

a5a05fae30d8c92963f1e65122c754077c3fc9ab8b0982c826dfb640edc7af28fd68b5540188fd60a15588fda7b925b9e3c4d41fc72033633746b17d8e15ad8e
SSDEEP

192:JLnwZnijcpQ9FHsAFFO7PB/BBaSBDjofjGo5Pr+oKn:Foij8QHHsoMD7YSOGoPtK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28b6f63bd025b974c2c5e9639c535dd7

Files

28b6f63bd025b974c2c5e9639c535dd7
.exe windows:4 windows x86 arch:x86

2eda502d39734c2a70c5e0d029966397

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE