428b594649bd85f843d59afea09e5849 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

428b594649bd85f843d59afea09e5849
Size

139KB
MD5

428b594649bd85f843d59afea09e5849
SHA1

1f88feea3d5b7d4f6dde7b08279d766364d9467a
SHA256

23a135080a0e69e0d2409413d427ce5e1859967eaf55b2247d69816797246b03
SHA512

acbfd362d7197fc0a2f3ed308cb7e86ca3651c44efa866256159c8dc99dcb9d8ddbb1103d4dcb5962deaa2ee9a5ff700ff2ac1d8bbb607f256962eee42646e8f
SSDEEP

3072:hlM5hOMcsMdy3Ny5A+j2glTO+o5ekTEFjKHPh:UeMYLAIxzOeUOjKH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
428b594649bd85f843d59afea09e5849

Files

428b594649bd85f843d59afea09e5849
.exe windows:4 windows x86 arch:x86

3517253dd852f79439ea603d0511e529

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCursorInfo
FindFirstFileExA
GetSystemRegistryQuota
RequestWakeupLatency
IsBadWritePtr
UnregisterConsoleIME
DisableThreadLibraryCalls
WaitNamedPipeW
GetStartupInfoA
OpenMutexW
GetComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 83KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE