27489fed91a0a973eb7a297facb69bfed79c2d3cdfac9e8e3e888be1f95a4554 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27489fed91a0a973eb7a297facb69bfed79c2d3cdfac9e8e3e888be1f95a4554
Size

76KB
MD5

75fd913a0854627821b3a2589870186e
SHA1

4219bff903bfc801cce2c5834d5858cc6cf27ac4
SHA256

27489fed91a0a973eb7a297facb69bfed79c2d3cdfac9e8e3e888be1f95a4554
SHA512

1cf3c17fd2a840e189e1ee0966d5118445aff3ec795d42dfcc531a3afcfebf7e2b7635a54efbbdda3c540a920e0e835f29e38d2d2eb2ec65d5a7aa652bb34f9d
SSDEEP

1536:jC3mssODTH2jxYPNuUK+P/E+hfK9MW7lWPHLfjEErxTWDTMqhGKYIZTET8x:cmsswTHExYPNuUK+ECia4GHDjBkMqhG6

Score

N/A

Malware Config

Signatures

Files

27489fed91a0a973eb7a297facb69bfed79c2d3cdfac9e8e3e888be1f95a4554
.exe windows x86

992012c80180ef5e65fad72ad1da7547

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EscapeCommFunction
GetProfileStringA
_lread
OpenFileMappingA
Module32Next
OpenFileMappingW
ConvertFiberToThread
SetFirmwareEnvironmentVariableA
GetConsoleWindow
GetCurrentThread
CreateWaitableTimerA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE