27ca682525dc15256dbfc387efce1155 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27ca682525dc15256dbfc387efce1155
Size

9KB
MD5

27ca682525dc15256dbfc387efce1155
SHA1

b6100cbb86c5160abcaba499344fa8348a204fff
SHA256

5aa47bc7f2526a90fd5dbe9e81c77b999c3c0bf4754aa0413a3a57a596b449bc
SHA512

12adb967bff82156e66cdc884e4f664fca58d12b29fb78366f1202d569f900dfa21ac1c931406db62f6db684e98fcb2eb8b14f2f0c6de3e98595e50616a88677
SSDEEP

192:2V9v5Dra3bbS7VOmsfE7149X7dwYCqlq2:2iK7VO7fk1e1Cql/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27ca682525dc15256dbfc387efce1155

Files

27ca682525dc15256dbfc387efce1155
.dll windows:4 windows x86 arch:x86

29a5dd872b2888a927113494e456233f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord823
ord825

msvcrt

strrchr
free
malloc
exit
__CxxFrameHandler
_initterm
_adjust_fdiv
_strlwr
_stricmp

Exports

Exports

ClbAddData
BGMGVUZF
ClbSetColumnWidths
SQQARPZE

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 577B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ