28717dc832b5681c9973dffb26d5b5f9618fc5c7a9361ced3d61ac7b06d5fd0a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28717dc832b5681c9973dffb26d5b5f9618fc5c7a9361ced3d61ac7b06d5fd0a
Size

5.7MB
MD5

54c7a8af55a337d216d454d1d9030859
SHA1

f1f9a048f51f13290cbe0f8554ebe1df3f202072
SHA256

28717dc832b5681c9973dffb26d5b5f9618fc5c7a9361ced3d61ac7b06d5fd0a
SHA512

55be40941df158e34aa07f682d5825b434b305b15abf9b18d12201d3f877d620dcb72ea746970da73d7f27afaa0da6584f69b4e9aae382565f9ac95307ae7842
SSDEEP

98304:z7CErDmw/W4TFbEtzV7GKrwGD+rbLceJiWa+6YPAScWCWZUWDE3/t:z2gF1wHHrPD+rbBJL3xcWCWZc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28717dc832b5681c9973dffb26d5b5f9618fc5c7a9361ced3d61ac7b06d5fd0a

Files

28717dc832b5681c9973dffb26d5b5f9618fc5c7a9361ced3d61ac7b06d5fd0a
.exe windows:6 windows x86 arch:x86

bd46ef3ed97ea313bc4fa50df7a2e275

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetDC
CharUpperBuffW

gdi32

BitBlt

Sections

.text
Size: - Virtual size: 347KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ