27fdd1940f9e54318816cc79784f617e6e808cf1a1cc9c7da6224091c11bc8e6

Sharing

Copy URL Twitter E-mail

General

Target

27fdd1940f9e54318816cc79784f617e6e808cf1a1cc9c7da6224091c11bc8e6
Size

5.7MB
MD5

effeb6367bc93f91f6fdc2182552ba23
SHA1

28036ad0b6baad5c1f0766c9fea6c937f372f7fb
SHA256

27fdd1940f9e54318816cc79784f617e6e808cf1a1cc9c7da6224091c11bc8e6
SHA512

a4e73c39aabb6f35a065eece0e8b584abc0063cdd4c9d2804300168436aaffb3edf0423b8e0f3e5b9115e7074fd87eecb7b62f88133ef9c6c2010b0ca4377aa9
SSDEEP

98304:b5Vdww3RgNE+UAiumPKFGKxq2MXtIz08:biwee+1kaRMXk08

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27fdd1940f9e54318816cc79784f617e6e808cf1a1cc9c7da6224091c11bc8e6

Files

27fdd1940f9e54318816cc79784f617e6e808cf1a1cc9c7da6224091c11bc8e6
.exe windows x64

f0ea7b7844bbc5bfa9bb32efdcea957c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 534KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 295B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/32
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/46
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/65
Size: 705KB - Virtual size: 705KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/78
Size: 443KB - Virtual size: 443KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/90
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0ea7b7844bbc5bfa9bb32efdcea957c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 1.8MB - Virtual size: 1.8MB

.data Size: 134KB - Virtual size: 534KB

/4 Size: 512B - Virtual size: 295B

/19 Size: 319KB - Virtual size: 319KB

/32 Size: 63KB - Virtual size: 62KB

/46 Size: 512B - Virtual size: 44B

/65 Size: 705KB - Virtual size: 705KB

/78 Size: 443KB - Virtual size: 443KB

/90 Size: 101KB - Virtual size: 101KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 32KB - Virtual size: 31KB

.symtab Size: 290KB - Virtual size: 290KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 1.8MB - Virtual size: 1.8MB

.data
Size: 134KB - Virtual size: 534KB

/4
Size: 512B - Virtual size: 295B

/19
Size: 319KB - Virtual size: 319KB

/32
Size: 63KB - Virtual size: 62KB

/46
Size: 512B - Virtual size: 44B

/65
Size: 705KB - Virtual size: 705KB

/78
Size: 443KB - Virtual size: 443KB

/90
Size: 101KB - Virtual size: 101KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 32KB - Virtual size: 31KB

.symtab
Size: 290KB - Virtual size: 290KB