28de8a09469112d882679706eb0b71cc | Triage

Sharing

General

Target

28de8a09469112d882679706eb0b71cc
Size

157KB
MD5

28de8a09469112d882679706eb0b71cc
SHA1

71029076ea31c9cfa7f85c41032f39325fba25fa
SHA256

19017a45d100ee3afcc0b2c665db089210430b18946f6ea01546c3970aa2b427
SHA512

b932cd17c0ebd629f2a954034e1f127835b8d7fb9575e3288d53687fea94aa64ae6d38af67e34f8f97ee0bc769b03b266ad07b4f351bc2b2cf51323ce0f82f3b
SSDEEP

3072:8GDwvPPq5i3ozgSZwGw94pNjx+7T/Fr4OqCC3oy:8dPPq8jGk4pNgXFrNU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28de8a09469112d882679706eb0b71cc

Files

28de8a09469112d882679706eb0b71cc
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ