28fa64a6e23c1f084649ae0c67e04712 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28fa64a6e23c1f084649ae0c67e04712
Size

393KB
MD5

28fa64a6e23c1f084649ae0c67e04712
SHA1

7ec658cc7c1568c92c32130dac5d9781ea42fe01
SHA256

ef86417850e7aaf9cfaafea5e0a5e6bca3c4670288f47daf69fed94432014c5b
SHA512

ea0a1a8e37c3192a28698eb3b044af3b06d9dc9706c0d886b836e8d20028fe1c20ee40d8654bc3a802eb8280e7b9a476e524da746e8c2bcb2e92ed43af908a45
SSDEEP

12288:4i3KpJI6xj1dV9fJcEXW4OYIb5IiENCaak:4iCb1dV9fJhXWGHNqk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28fa64a6e23c1f084649ae0c67e04712

Files

28fa64a6e23c1f084649ae0c67e04712
.exe windows:4 windows x86 arch:x86

3c84ff2534b71fbf4f7a5a4e63f007cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
Sleep
GetConsoleAliasA
CreateFileMappingA
GetACP
FindClose
LocalLock
TlsGetValue
LocalFree
WaitForMultipleObjects
FindAtomA
HeapCreate
GetCalendarInfoA
FreeEnvironmentStringsA
GetConsoleCP
CreateFileA
GetLastError
LoadLibraryExA
CloseHandle
GlobalUnlock

user32

IsWindow
DrawEdge
SetFocus
GetDC
DefWindowProcA
DrawTextA
CallWindowProcA
GetDlgItem
GetMessageA
GetIconInfo
DispatchMessageA
CreateDialogParamA
CascadeWindows
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecSkip
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ