027bb10917d96e3a40b03059eeb762e3fb74b5be225e2b13275e1be9991bf835 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

027bb10917d96e3a40b03059eeb762e3fb74b5be225e2b13275e1be9991bf835
Size

8.9MB
MD5

2985717950cabab35bd046bb0ec6f978
SHA1

e684b8e1f17aba4d6581051ad9cc5050e84cbcfd
SHA256

027bb10917d96e3a40b03059eeb762e3fb74b5be225e2b13275e1be9991bf835
SHA512

5891f8ddf6d819700bca0272244f7ad8cd7e91e05dd146de23eb0e46a1290591f5d5240505371d5952a718b51475e027080a2fa4216e033c8dde9070f9fb89a7
SSDEEP

196608:OeqC8h8ZrUtYsHGXxXswP35J3S3PEe+dW90HbPqXR0u28:OdC8h8+zHGXxVP35IPSdW907qRx28

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
027bb10917d96e3a40b03059eeb762e3fb74b5be225e2b13275e1be9991bf835

Files

027bb10917d96e3a40b03059eeb762e3fb74b5be225e2b13275e1be9991bf835
.exe windows x86

ab654eed828facad94d7d5e7169657c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamClose

ws2_32

ntohl

kernel32

SetLastError

user32

ScrollWindowEx

gdi32

RoundRect

winspool.drv

OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ord17

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 7.8MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 984KB - Virtual size: 984KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ