df28a3128346aa9ebd7ce17251a9aaac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df28a3128346aa9ebd7ce17251a9aaac
Size

83KB
MD5

df28a3128346aa9ebd7ce17251a9aaac
SHA1

45eb1cb243a4ac652fe4a0d77cc9c12e614c9877
SHA256

a23e2b218bec82423ab1c4a122f4c47a93381a6d9fbc15ae98c6bd72bf5c45b7
SHA512

2bfe858ed54ad404b0d5b39cf2830173b5a14cea2a52df7751344f5a63f09920494c1621a0f627faa3df6b8933620fb69e7d9654220ba04b0be59d6f0c19edbe
SSDEEP

1536:YxKcGM17daTDkVABgitA84ysyKqAZQ4/+8fI7Bd2b9wfFS5PDlzuNjztAtlo0Czl:t2PJsnYyhR6aq3jz7e7jBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df28a3128346aa9ebd7ce17251a9aaac

Files

df28a3128346aa9ebd7ce17251a9aaac
.exe windows:4 windows x86 arch:x86

072398d85e296b8840e1de3050b02540

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressA
SetConsoleCP
GlobalReAlloc
InvalidateConsoleDIBits
_lopen
GetTempPathA
RequestDeviceWakeup
RtlCaptureStackBackTrace
GetPrivateProfileIntA
GetConsoleAliasW
WriteConsoleOutputAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE