270468776e113646433bb7d32a55af2e47b3e8d613a9e5ee2a4b3969ff6be544 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

270468776e113646433bb7d32a55af2e47b3e8d613a9e5ee2a4b3969ff6be544
Size

134KB
MD5

2daa42d7df0c9fc7b3afa4da9be8974a
SHA1

5b28462c8f9fe0f576e656138badacb755210feb
SHA256

270468776e113646433bb7d32a55af2e47b3e8d613a9e5ee2a4b3969ff6be544
SHA512

027bb9af25f8e7f5f687fb6a5c934b242ae4c0eabe626256ee2025b5fd7f8413ff988f389460798726d7c6d043842a7529b4deeb8955ffbcbc7cb45703b1b940
SSDEEP

3072:bUD9JxpzoSIP9tKXYPgqtA8+FnH07e9R23RnvUk:bUD9JxpzozP6vq+80nU7zR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
270468776e113646433bb7d32a55af2e47b3e8d613a9e5ee2a4b3969ff6be544

Files

270468776e113646433bb7d32a55af2e47b3e8d613a9e5ee2a4b3969ff6be544
.exe windows x86

7356561522da79605eab86fd45677a06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
CloseHandle
lstrlenA
WriteFile
CreateFileA
FindResourceA
GetProcAddress
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetOEMCP
GetACP
GetCPInfo
ReadFile
MultiByteToWideChar
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
GetLastError
FlushFileBuffers
SetFilePointer
GetStdHandle
WideCharToMultiByte
GetModuleFileNameA
VirtualFree
VirtualAlloc
HeapReAlloc
SetStdHandle
GetStringTypeW

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
_onexit
__dllonexit
_CxxThrowException
__CxxFrameHandler
??2@YAPAXI@Z

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ