528bc9ebcc3820702c891942a32f8159 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

528bc9ebcc3820702c891942a32f8159
Size

43KB
MD5

528bc9ebcc3820702c891942a32f8159
SHA1

218445fd94fa7425a6c513a3df7ffea451fe3590
SHA256

1167d709ee01d7e18ec3ebfe41db418b23d85bf2301edc51361ac7069d46d24b
SHA512

00da1773c6a121faec2b65af52f76000dbf5d9a597b66ba31854f1f5f7155b1608524dfbd3a80d5f298cba3f21ea5c68b911dbe74d49de1f6c34c06e48b474ec
SSDEEP

768:XlYC5G3EUIqNPeH7bbUaYL02TT9h2tUHkBHMC3rqBrIBjD5P9wHiOnPRto:R5/UhWbn60GT9wtUHkBskCI9DJ9Yiio

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
528bc9ebcc3820702c891942a32f8159

Files

528bc9ebcc3820702c891942a32f8159
.exe windows:5 windows x86 arch:x86

2efe6c0c7f636bf1e11e417fb721096b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessW
GetCurrentThread
GetSystemTimeAsFileTime
lstrcatW
CopyFileW
GetTempPathW
GetUserDefaultUILanguage
ReleaseMutex
MoveFileExW
DisconnectNamedPipe
SetEndOfFile
lstrcpynW
GlobalLock
GetDriveTypeW
MultiByteToWideChar
FindFirstFileW
GetModuleFileNameA
CreateFileMappingW
SetLastError
EnterCriticalSection
GetSystemTime
CreateThread
OpenProcess
WriteFile
GetCommandLineA
UnmapViewOfFile
FlushFileBuffers
lstrcmpiA
SetFileTime
HeapFree
SetFileAttributesW

user32

CloseDesktop
MsgWaitForMultipleObjects
GetForegroundWindow

Sections

.hcfoz
Size: 35KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mxebkx
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bqlqv
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ