027102e8d9d89ae4844cb4f7fb93c202 | Triage

Sharing

General

Target

027102e8d9d89ae4844cb4f7fb93c202
Size

100KB
MD5

027102e8d9d89ae4844cb4f7fb93c202
SHA1

c5ebb3ac7f859cedc79aab54293028039aae568e
SHA256

18bf4c938974c4808507b2be2ee7c94e6a976d8ec7f0dbdffe47ed8a5e68be73
SHA512

3f1558315d273fb60bd90f427cc7f880e492abda8edb032ff7441404d26d010401dd6440d6b26d655b5a531c04c7fe9f5cce2edecd51ac75cc14b15a8825a78b
SSDEEP

3072:meX+y9eCIQMrcwOf3aZEXy0HifOGWvU4C:mi54CsjKXy0Cm+P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
027102e8d9d89ae4844cb4f7fb93c202

Files

027102e8d9d89ae4844cb4f7fb93c202
.exe windows:4 windows x86 arch:x86

6b371078c72a066e43bd55a86835683e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetCurrentProcess
GetWindowsDirectoryA
IsBadReadPtr
SetFilePointer
CreateProcessA
DeleteFileA
GetTickCount
GetModuleHandleA

ole32

OleSetContainedObject
OleCreate
CoUninitialize
CoInitialize

user32

DestroyWindow
SetWindowLongA
CreateWindowExA
DefWindowProcA
PostQuitMessage
UpdateWindow
GetWindowLongA
TranslateMessage
MessageBoxA
ShowWindow
DispatchMessageA

advapi32

RegCloseKey
RegSetValueExA
RegDeleteKeyA

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1006B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ