270aa38f38d70a950bae4c56fef9cc96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

270aa38f38d70a950bae4c56fef9cc96
Size

122KB
MD5

270aa38f38d70a950bae4c56fef9cc96
SHA1

971f3e9b5f0d7400509ede457d6c6207f3161b59
SHA256

33952decfaabf354489f9b90c79c93521192e62dba5940b7c45357e7e0691725
SHA512

4b381e1258e69265789af0e865bb84547abe42d67b56a06638803d7d30a926e8aacdd429c30be056b3078bc4553fa42d9373c31109572adcae04bc856817adf6
SSDEEP

3072:NDq4mI6Gi8YO9h+AP3Nbr6WQzzed/MpNtR7:NDq4mlGypAP3FrIznpNtR7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
270aa38f38d70a950bae4c56fef9cc96

Files

270aa38f38d70a950bae4c56fef9cc96
.exe windows:4 windows x86 arch:x86

8ea93b8538db441eb44838660f59e5fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
FlatSB_SetScrollPos
ImageList_Add
ImageList_Merge
GetEffectiveClientRect

kernel32

CreateProcessW
EnumDateFormatsExW
FindNextChangeNotification
FreeVirtualBuffer
GetCPInfo
GetConsoleFontSize
GetDriveTypeW

Sections

.text
Size: 72KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE