28ea37306da1d1eb343de79ca00a4b58

General

Target

28ea37306da1d1eb343de79ca00a4b58
Size

112KB
MD5

28ea37306da1d1eb343de79ca00a4b58
SHA1

78e02f3f78ce6f840fad6038539caf2f079b3b32
SHA256

e54e76d1d56ccb3fc1aeb0f6c7e0a3dbfb5446f7e92f085317c9d6b1a16cf707
SHA512

d895f13103377c5eeaeeace8ec1935542c456fb4ac18491dd65e1527cdf22ecee50849420cc786e00ee32260057b2c9209996decb15522816da0c774fe18687d
SSDEEP

3072:Nm4cNnh3H8q5pBbw1S7Y49vv/m0xsdpad:NmZ5cqNb77PE0gs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ea37306da1d1eb343de79ca00a4b58

Files

28ea37306da1d1eb343de79ca00a4b58
.exe windows:5 windows x86 arch:x86

8b561e71290f4b4526d800495937f83c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
GetDesktopWindow
GetSystemMetrics
CharNextA
GetParent

gdi32

GetDeviceCaps
GetObjectA
DeleteDC
CreateCompatibleDC
SaveDC
RestoreDC
SelectObject
LineTo
PatBlt
GetClipBox
GetPixel
SetTextColor
CreateSolidBrush
SelectPalette
CreateFontIndirectA
SetTextAlign
SetMapMode
CreatePalette
GetTextMetricsA
SetStretchBltMode
RectVisible
DeleteObject
CreatePen
GetStockObject
SetPixel

kernel32

DeleteFileA
GetWindowsDirectoryA
GetThreadLocale
GetCurrentProcessId
CopyFileA
GetCommandLineA
lstrcmpiW
lstrcmpA
GetConsoleOutputCP
MulDiv
IsDebuggerPresent
GetCommandLineW
GetCurrentProcess
GetVersion
RemoveDirectoryA
GetCurrentThread
DeleteFileW
GlobalFindAtomA
GetModuleHandleW
GetCurrentThreadId
GetDriveTypeA
QueryPerformanceCounter
lstrcmpiA
lstrlenW
GetProcessHeap
GetTickCount
GetOEMCP
GetACP
GetStartupInfoA
SetCurrentDirectoryA
GetUserDefaultLangID
GlobalFindAtomW
lstrlenA
RemoveDirectoryW
GetModuleHandleA
VirtualAlloc
VirtualFree

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b561e71290f4b4526d800495937f83c

Headers

File Characteristics

Imports

user32

gdi32

kernel32

glu32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 11KB - Virtual size: 11KB