28d335f9b87e53bdaa0598c1683dbf14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28d335f9b87e53bdaa0598c1683dbf14
Size

50KB
MD5

28d335f9b87e53bdaa0598c1683dbf14
SHA1

fc391749cb3fa22796ea2bb3bf2a710a9f4728a3
SHA256

73b6f4f1b975e743818d57379c0f7e8dcf552af2e73996ac8e37c326ac3d7c6b
SHA512

cc79933c8e5801e96aa29361e604b84c5fa86abad0160e658b27734fa8f8176503126b1c0b5f6b7b3616b82a7d7ab410de110328e8199e9ecaf5c9cf022e62d1
SSDEEP

1536:T5//4ouCJ4MnyVBgg9gsnCrKjyGvdkp/5nvKvana:BsCJbyVChMCujyGvdkfnvKvQa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28d335f9b87e53bdaa0598c1683dbf14

Files

28d335f9b87e53bdaa0598c1683dbf14
.exe windows:5 windows x86 arch:x86

d81a0cd5e01683083b00178ad064a06c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
wnsprintfA
wnsprintfW

user32

CharLowerBuffA
EndDialog
ExitWindowsEx
FindWindowExA
GetIconInfo
GetWindowTextA
LoadCursorA
MsgWaitForMultipleObjects
SetThreadDesktop
ToUnicode

Sections

.fix
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sruh
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.roh
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ