728dd49ec9a6e75058b50806ccfea76f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

728dd49ec9a6e75058b50806ccfea76f
Size

48KB
MD5

728dd49ec9a6e75058b50806ccfea76f
SHA1

3a986b8695d8f750d868c443e96f00b77259efdd
SHA256

0e4e26e1547e964833816f387933bf90ce9abd2f50dfcd10ea36d7e1f8ad67ef
SHA512

8b1a3b9ada9365f274c4bdbd7521bba655fd3a5cd9419c9469d4df1c1115becc196b74b12697aa8a19a31976853e00c45dfc707dc94a6143a3fe071b2d3bdb6c
SSDEEP

1536:bZEVPyaxAMCjWWkbkWuoI/z3MwAKzdXiuSifL:SPjsKNOoKiKByML

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
728dd49ec9a6e75058b50806ccfea76f

Files

728dd49ec9a6e75058b50806ccfea76f
.exe windows:4 windows x86 arch:x86

1900879c98b4a96d399d6ce626330c68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

CODE
Size: 41KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE