528ac77e9de5c67da56535b9dc3a5fe6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

528ac77e9de5c67da56535b9dc3a5fe6
Size

245KB
MD5

528ac77e9de5c67da56535b9dc3a5fe6
SHA1

a5bb935047ba7c624f63aef720ed90455e7ae815
SHA256

3e7ce73af025a09c30228ce97a05a31a9bdd842d830e2e700c2a66033a0d6003
SHA512

af0e0d8c253fc4db4ea4740f67e72fd3a46b5be9a1e43ca3e7562f3216841861d6424fc91a1fd22e1ba09dce5f13e8486a6ebcfe01f8d1f57a8cedb909853e33
SSDEEP

6144:mktR0j6T7vS+H7ngD0XSgIWXHYVaMd/Sb1puvMXmEHd9L:mcLbBXLpM9ApKM3N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
528ac77e9de5c67da56535b9dc3a5fe6

Files

528ac77e9de5c67da56535b9dc3a5fe6
.exe windows:4 windows x86 arch:x86

dbdb0525986cb60465f8680544bd9d66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
QueryPerformanceCounter
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE