27003a38865b42011700f0c9a7e8650e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27003a38865b42011700f0c9a7e8650e
Size

48KB
MD5

27003a38865b42011700f0c9a7e8650e
SHA1

2f7719b059751fbd6af4c256de5aaf361459a076
SHA256

783e58f8299b5e2b73babdd82c7a964cec174d95fef33d11ec8573fbedc5ab70
SHA512

ffde68b60970ed686fa6e604b33742c05622d0eced22887f2429d750a852ca91805836c707984d7a6d6d3cd26aac72c1f596039b4b10e8d8e6845e28b2a6ce5f
SSDEEP

768:/b8nMZYNDqA0oCkQA0L+Nm63RMu8ptHDu/jTTvqHDwePmRlmMDn3nZ5IEI:/AphXQA0LAm6dOJDu/zvMce+RlmMDvT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27003a38865b42011700f0c9a7e8650e

Files

27003a38865b42011700f0c9a7e8650e
.exe windows:5 windows x86 arch:x86

b3943879c8a82dd553de0c4c3b664d48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptGetHashParam

kernel32

GetUserDefaultUILanguage

shlwapi

PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CloseDesktop
CloseWindowStation
EndDialog
ExitWindowsEx
GetClipboardData
GetForegroundWindow
GetKeyboardState
PeekMessageA
SendMessageA
ToUnicode

Sections

.gzur
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tcb
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fkh
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ