027776518ff97a55af6ea5b1a36c2cf1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

027776518ff97a55af6ea5b1a36c2cf1
Size

954KB
MD5

027776518ff97a55af6ea5b1a36c2cf1
SHA1

abd50301cada173ab315f9ec6d5790de5192cd78
SHA256

141825e3c9f5b90375c32eda5531e8707701a7074112eeebf059c6588cfe3b15
SHA512

76254eec9982151fb9441b4bcb986fbdb7397771c47af83bd67391fc5ea70a5380809d96fb2c3c11c84ab14e064a071407b32d726f85a1cbd583050baa44d4fc
SSDEEP

24576:GDHV85R2q5BQ1Onauk6klyaRxq/QnDw47F2wjQEIUoE1:GDGwqnQ1yaukv0aRg/4w440

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
027776518ff97a55af6ea5b1a36c2cf1

Files

027776518ff97a55af6ea5b1a36c2cf1
.exe windows:4 windows x86 arch:x86

2957bfc3b0848f2ad1cde8965bf81715

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
WinExec
GetModuleFileNameA
SetLocalTime
GetLocalTime
WriteFile
CreateFileA
GetFileSize
ReadFile
SetFilePointer
GetModuleHandleA
GetTempFileNameA
GetTempPathA
GetPrivateProfileStringA
Sleep
LoadLibraryA
GetProcAddress
GetTickCount
CreateThread
GetFileAttributesA
lstrcmpiA
GetStartupInfoA

user32

ShowWindow
GetWindowLongA
FindWindowA
wsprintfA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

msvcrt

_itoa
_strcmpi
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
free
strncpy
malloc
atoi
strrchr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE