8e28cf7804b9142268729253f0d12839 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e28cf7804b9142268729253f0d12839
Size

21KB
MD5

8e28cf7804b9142268729253f0d12839
SHA1

d3fd4e50a68ea35a0b9a26d9683542379b4d3893
SHA256

5769b313780126704b76674d3b565a3586b08ca99cec7a28f3ca2f91046bb851
SHA512

ff0e5cccd23c3d39bad2698ff71b26ceb79afe57dc6a86c7408e350f197daba277e55bd9ccd5fc37f7c1624870d8f1efe6fde2612edd57c18a2a05c5444315dd
SSDEEP

384:V1m6iO9b90LwsZ0gV/BwoFZ2GxSCV8i+54z0VlqHVz:sqZ8bmgV/RAEdV8c0jqHN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e28cf7804b9142268729253f0d12839

Files

8e28cf7804b9142268729253f0d12839
.exe windows:1 windows x86 arch:x86

33474628c7b7faf51e9b6fcb80bfe0ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

kernel32

GetModuleHandleW
GetStringTypeW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

gdi32

Chord
DPtoLP
CreatePen
EnumICMProfilesW
ExcludeClipRect
BitBlt
Arc

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE