27197ca166bfc4885e2f8b55c6ea132f | Triage

Sharing

General

Target

27197ca166bfc4885e2f8b55c6ea132f
Size

54KB
MD5

27197ca166bfc4885e2f8b55c6ea132f
SHA1

e00f2c1933aeea393c782ef28d6ed2581928db64
SHA256

a72ae83a9411a09856053daf8650b7c1cc5c5678988a9b61206d75f6328254dc
SHA512

72626ac480e2ab8bab1ffc700e9f448917b41d7d7f64148a0cdea898f83fe4288003a42256bbb5f0390b0de7ebd70007d02db343397e76e83b26be303a12cf3c
SSDEEP

1536:XJ/AbnSNzI50ZuwSzEM8LgnOsIX0Jox2lEcVkb:XJ/AbnSI0kwSACOOox2ny

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27197ca166bfc4885e2f8b55c6ea132f

Files

27197ca166bfc4885e2f8b55c6ea132f
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ