8d28a86bf485e1a75bf773cb46f23dc5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d28a86bf485e1a75bf773cb46f23dc5
Size

16KB
MD5

8d28a86bf485e1a75bf773cb46f23dc5
SHA1

b365b199013d9eea5cc6e89018af01752e2ea122
SHA256

a8986eeb5483cff87207da351c8b4698dd89c8b0c6ef1d8a586c670a20f1a265
SHA512

c0cd6ee9715b3630420a3c4c62608fbd53dddf7dc794c164fc0d42367df8b460d3948c4b2a690b3898266c318dbffa498e0ed2a4504dd626649828cce7d7dbf1
SSDEEP

192:n2gO+DS5hkxrcjvg5QW0x8f+bK5ugoW5pV701toYrGaEwhah+/6M8s:ROMxrcjbFx82lgoWBAQIGa8h+/6MV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d28a86bf485e1a75bf773cb46f23dc5

Files

8d28a86bf485e1a75bf773cb46f23dc5
.exe windows:1 windows x86 arch:x86

84f98c8780ea46712083e7107b93101b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
FindFirstFileA
ExitProcess
WriteConsoleA
WaitForSingleObject
CopyFileA
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
WriteFile
CloseHandle
GetCommandLineA
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetVersion
Sleep

ole32

CoInitialize
CoCreateInstance

advapi32

RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA

shell32

ShellExecuteA

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE