c28802f0b84eb86bc9603400a7fb1733 | Triage

Sharing

General

Target

c28802f0b84eb86bc9603400a7fb1733
Size

120KB
MD5

c28802f0b84eb86bc9603400a7fb1733
SHA1

4ed799da0c39b6e1ef16bd4addaa8a50334f672a
SHA256

e902a0aa6042777342d2864ca369537820a3f19abc0ecc027db83f99b38686f3
SHA512

68ee1efe727298b4457c94cce8cc367bc77e4d9c6d0eb1315d13dde80dbb78cc15df0305a2e92a906e8a5d442885dbded5502d7c9480a2af5cc1b280845a0063
SSDEEP

3072:7DWKDq7lYzH8Xx7RyOIe4bEv7rNCfoF+Xx2Vwgo4i:FqlYmx7ktqrNCfO+Gwgof

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c28802f0b84eb86bc9603400a7fb1733

Files

c28802f0b84eb86bc9603400a7fb1733
.exe windows:4 windows x86 arch:x86

ae7f7beaca204a53cc7faf388844f75b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
EscapeCommFunction
BuildCommDCBA
QueryPerformanceFrequency
WinExec
FindResourceA
SetThreadPriority
GetCurrentDirectoryA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ