027cd9544c48d61911603e89f328fce1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

027cd9544c48d61911603e89f328fce1
Size

72KB
MD5

027cd9544c48d61911603e89f328fce1
SHA1

cc7b14a02d360762abbb11b9b8c4c4d6067114e3
SHA256

801e48146592d25735e565e7d1900ff8a31c76038c27a976c0a5a2932b26b285
SHA512

d4a4029ce9a80b889b474baff118d5bfebec2689c396e6b133fedd254cd4df92cf238dd186b159ba0573d90184746cebd373e1a2d9a484c9e881a9d66b8abb75
SSDEEP

1536:D4n59IGUPMWLpbQ/UTO7pcXqXRQ7NkPE:SrUrcc/XgG7ec

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
027cd9544c48d61911603e89f328fce1

Files

027cd9544c48d61911603e89f328fce1
.exe windows:4 windows x86 arch:x86

8b27b07b655bfcdd9b56d16040bd9ac0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
FindAtomA
ReleaseMutex
IsBadStringPtrW
InitializeCriticalSection
ReleaseMutex
GetCurrentProcessId
TlsGetValue
GetFileTime
GetEnvironmentVariableW
HeapCreate
GetDriveTypeA
LocalFree
lstrlenW
LoadLibraryW
CreateEventW
FindClose
GetPrivateProfileStringA
GlobalFlags
GetCurrentThreadId

user32

DrawStateW
GetKeyboardType
CreateWindowExA
IsWindow
GetClientRect
GetClassInfoA
CallWindowProcW
GetSysColor
EndDialog
DrawTextA
SetFocus
DispatchMessageA
GetSysColor

rastapi

DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone

clbcatq

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE