6c27a644faa1fa995719c7464b5cecfe | Triage

Sharing

General

Target

6c27a644faa1fa995719c7464b5cecfe
Size

44KB
MD5

6c27a644faa1fa995719c7464b5cecfe
SHA1

4ac99441a69178c83ea99ea097052263af0165b3
SHA256

27f145ca9a188955f4ea342878767e7113a11ea48d66e2662747b75a4bec3f6a
SHA512

4ef3c1d33dae6ae64f115bbeb593ed8b67236b4b44bdeefd146851a07ade7f206a29c3b9badfab5aa1f5eb61c6b095cf5160237db6934f9fe8e09e408bba227e
SSDEEP

768:LpP/lkASVmCj0ZmJJHyGG7q3tCNOJeOxfqBQtNTkidgtN8kjTY4ZSbjZs:lXlIlteIdk6kGbjZs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c27a644faa1fa995719c7464b5cecfe

Files

6c27a644faa1fa995719c7464b5cecfe
.exe windows:4 windows x86 arch:x86

b8e98d5cb79c757f7e026efbed63e98d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSizeEx
HeapDestroy
SetLocalPrimaryComputerNameA
WriteConsoleInputVDMW
GetProfileSectionW
SetFirmwareEnvironmentVariableW
BaseFlushAppcompatCache
MapViewOfFile
GetConsoleProcessList
Thread32Next

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE