828f196ae077731a1c9b635e19d653dc2f9a62432ca33feb695837989d079d7a[.]exe

General

Target

828f196ae077731a1c9b635e19d653dc2f9a62432ca33feb695837989d079d7a.exe
Size

1.3MB
MD5

478917be6426f754bc7820cc2cf51378
SHA1

84b654c6c6b5612fa7726fc5c6bc52b9658b264d
SHA256

56417f29cbe8f23a961d327fce04e87a5474054b353c13fe817d1d615d2ea286
SHA512

764504a785e0e652c3d1198fd7fa03d66d1bc5372e6d39d76a65d51065e5b53614ad280e93659379df6e6af99821cefba0e0dce51e122d5b506be360ac05a88a
SSDEEP

24576:kQohaknEr6qtp93QodnkzeDKxgI6AeCXla99:kQZknK6sQinkzeDKxgI1s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
828f196ae077731a1c9b635e19d653dc2f9a62432ca33feb695837989d079d7a.exe

Files

828f196ae077731a1c9b635e19d653dc2f9a62432ca33feb695837989d079d7a.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
ColorHook
DDECallback
FileHook
FileHook2
FileHook3
FontHook
KeyboardProc
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook
adjustcmb2
fh2showit
fh2showwindow
fh3drawit
fh3showwindow
fhfileok
fhshowwindow
fhupdatetotal

Sections

CODE
Size: 960KB - Virtual size: 960KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 66KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.INIT
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 960KB - Virtual size: 960KB

DATA Size: 66KB - Virtual size: 212KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.INIT Size: 6KB - Virtual size: 8KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 1024B - Virtual size: 4KB

.reloc Size: 88KB - Virtual size: 88KB

.rsrc Size: 177KB - Virtual size: 180KB

CODE
Size: 960KB - Virtual size: 960KB

DATA
Size: 66KB - Virtual size: 212KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.INIT
Size: 6KB - Virtual size: 8KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 1024B - Virtual size: 4KB

.reloc
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 177KB - Virtual size: 180KB