28823f972346987c4967a8ba54f1a860N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28823f972346987c4967a8ba54f1a860N.exe
Size

238KB
MD5

28823f972346987c4967a8ba54f1a860
SHA1

16baee60e0fa7d5690c79f492e343c12f0fb2bff
SHA256

4d74e602904afdee0d163b149725d41d592805fee28314af0c5427ffad4a6687
SHA512

94f099b32c703a767e769d9cad9a8c400ff050b3aeb087088d848db1de0c1f6c32d2a4e2f62717e377356e504be7d1c0ee4326b584d88107c551b44f7ccc5090
SSDEEP

6144:KfqWdfWX9aK137BVgAEYXf/KoDkE1Kcj:K/fWtaEDgVTAL1Kcj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28823f972346987c4967a8ba54f1a860N.exe

Files

28823f972346987c4967a8ba54f1a860N.exe
.exe windows:4 windows x86 arch:x86

be3d245062de29384df92d230fae9a21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
IsWow64Process
GetCurrentProcess
OpenProcess
LocalAlloc
LocalFree
CloseHandle
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA

wininet

InternetGetCookieExA
InternetSetCookieA
InternetGetCookieA

msvcrt

strncmp
realloc
atoi
_ftol
sprintf
strncpy
??3@YAXPAX@Z
??2@YAPAXI@Z
strchr
free
strstr
malloc

user32

MessageBoxA
wsprintfA

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE