28d60b9442560b087a3f673558ed70bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28d60b9442560b087a3f673558ed70bc
Size

77KB
MD5

28d60b9442560b087a3f673558ed70bc
SHA1

27e629fd44be1c3a94c567bfffc6c520359e6d1e
SHA256

6e83873de8237a675bcda6fd64e07a1bc2df18e782358eddaa96e33352075994
SHA512

d4bb99bcb7099bed3aff3db262e49ea0741a6d38d4bca7a7b46ea18cae3212125880caff837ab1a0bcab2fb16f3415c7ea5af0b9a83024ea3d099163824a16b5
SSDEEP

1536:7+KDuOzZvTN2LpLFsi0T3ax2X+YbX5FusNO5LcN3sxl:7jDuOzZvTN2Lkf+YbpksNO5Lc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28d60b9442560b087a3f673558ed70bc

Files

28d60b9442560b087a3f673558ed70bc
.exe windows:4 windows x86 arch:x86

dc021697021bf7ff265b16325bdb816f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow
DrawIcon
DestroyCaret
FillRect
GetMonitorInfoW
GetShellWindow

advapi32

ReadEventLogW
RegFlushKey
DecryptFileW
ReportEventW
OpenThreadToken

wininet

FreeUrlCacheSpaceA
GopherFindFirstFileA
GopherOpenFileW
FtpGetFileW
HttpQueryInfoA

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE