a28cc17a3a1b2a6233f0cd25a7342626 | Triage

Sharing

General

Target

a28cc17a3a1b2a6233f0cd25a7342626
Size

39KB
MD5

a28cc17a3a1b2a6233f0cd25a7342626
SHA1

b1ab4bba6f3c3ffe399bdb3c2c33de23b6907535
SHA256

925d7d8c593eea153d6338be2d829f46f7ddec517b02369642dd5df3ba629318
SHA512

8b8398593c7897594484852813341ed86ecbada09b3ecf75d2bb30decd1d28c58454ac8499e5bdfa86979bf93045f1ae516d8e6068ea1c7de18c3d40172316b5
SSDEEP

768:yd6orTi7hkmeFIbtqADYdz2SGUuJ9wqtsJz91I6:TorTitkmQIsADYdzT4KJ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a28cc17a3a1b2a6233f0cd25a7342626

Files

a28cc17a3a1b2a6233f0cd25a7342626
.exe windows:4 windows x86 arch:x86

d454e99d52225633e081d74626daa311

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadContext
GlobalAlloc
GlobalMemoryStatus
HeapAlloc
HeapCreate
WriteConsoleA
lstrcmpA
lstrcmpiA

msvcrt

strspn
_exit
free
realloc
srand
time
sscanf

user32

GetFocus
MsgWaitForMultipleObjects
SetWindowLongA
FrameRect

oleaut32

OleIconToCursor
GetErrorInfo
OleTranslateColor
RevokeActiveObject
SafeArrayAccessData

shlwapi

SHSetValueA
StrSpnA
StrRStrIA
SHDeleteKeyA

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ