27a2d717be948f6889c379d04f811db4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27a2d717be948f6889c379d04f811db4
Size

9KB
MD5

27a2d717be948f6889c379d04f811db4
SHA1

fa90be0ac9b86acbb76314142eea3b9f8a99cd7a
SHA256

45bd7118b989dc07d392fa50d25884a63020ebf09ca32f9e2558d00171f01ed5
SHA512

8e9ed261c2a3266bd1f555ee143c5f9386fb77814bacfead3f1ae53fc00a848e33c63a3907666cae7627a5b163bcde87347e321d5b160c3de39f88669dfa7d7a
SSDEEP

96:pDZBNb54yt4HYDF51549gcBUWepX/RFi8uBugNMFfLwh/W6oa:5ZBb4yt4g12lOP/uBugSFEh/WFa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27a2d717be948f6889c379d04f811db4

Files

27a2d717be948f6889c379d04f811db4
.exe windows:1 windows x86 arch:x86

a7888b3ca5992ff044183ddaf44f703c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeLibrary
GetCommandLineA
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
CreateFileA
ReadFile
ReleaseMutex
RtlUnwind
SetFilePointer
CreateMutexA
WriteFile

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

crtdll

__GetMainArgs
atoi
exit
memset
raise
signal
sprintf
strcat
strchr

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 94KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 940B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE