27ceab409d1468632884d431be7ef5156ae7697891a654d85d58edfdd4b8014a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27ceab409d1468632884d431be7ef5156ae7697891a654d85d58edfdd4b8014a
Size

119KB
MD5

7e5e13a8f5e294898ab3a85e2cf5acff
SHA1

e96a3edbe59204bf2aca2f3490375925ef9e0d47
SHA256

27ceab409d1468632884d431be7ef5156ae7697891a654d85d58edfdd4b8014a
SHA512

990a31309d8d58ee4eac63899a5cdd7082d5062984e671d0e4af3937130b3b5b8fe2f6a1403e5183d74dda724e91f11b6eb200a9f6dc30af00e469c206596d04
SSDEEP

3072:p4UrlZCBYzr8oRu5Q6iFueoK0+9es19skX+jVq:DZ4YTRu+6iFuet4A1kV

Score

N/A

Malware Config

Signatures

Files

27ceab409d1468632884d431be7ef5156ae7697891a654d85d58edfdd4b8014a
.exe windows x86

c3f00c8436acb3a3f8679cdb8fe9af5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GlobalAlloc
GetProcessHeap
GetFileAttributesW
GetProcAddress
OutputDebugStringA
lstrlenA
GetCurrentProcess
ExpandEnvironmentStringsA
CompareFileTime
GetWindowsDirectoryA
MultiByteToWideChar
RaiseException
GetStringTypeA
GetVersion
IsBadCodePtr
SetEnvironmentVariableA
VirtualProtectEx
GetCommandLineW
CompareStringA
GetSystemDefaultLCID
GetModuleHandleW

msvcrt

__p__commode
__setusermatherr
__p__fmode
__p___initenv
__getmainargs
_except_handler3
_adjust_fdiv
_XcptFilter
__set_app_type
_controlfp
calloc
_initterm
_exit
free

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE