27f916477c4cafc28d79349cae50f544 | Triage

Sharing

General

Target

27f916477c4cafc28d79349cae50f544
Size

23KB
MD5

27f916477c4cafc28d79349cae50f544
SHA1

85e8e0392dc3f2fe58db48e2af846e54e1ce16ee
SHA256

41ad093b2e4cddb029fcf44f05e20d30c0d4969ded70cd670ee9bcdd11afe897
SHA512

8b35c292d64744534c71d399dcdd6ab71d71a64707b9c99ef5984efb7344f6e105014ffdaae15d90a41f9b4bb2f3c97c7076062108ff6d9a42018e01aa2cea82
SSDEEP

384:SpEBWTvWx+W5RqncGcUZIFj4fz/o1nM33GnCcEEw7Kx9V5+0hI2:SpETOndD6FjIoa38EEIKx40u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27f916477c4cafc28d79349cae50f544

Files

27f916477c4cafc28d79349cae50f544
.exe windows:5 windows x86 arch:x86

a64ee764367f47bfe75a9e2aa9bf9559

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetModuleHandleA
GetStartupInfoW

msvcrt

??2@YAPAXI@Z
_c_exit
_exit
_XcptFilter
_cexit
exit
_wcmdln
__wgetmainargs
wcstok
wcslen
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr
wcscpy
??3@YAXPAX@Z
_initterm

msdtctm

ord4

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE