27471d058981990620cbd14418325784 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27471d058981990620cbd14418325784
Size

1.5MB
MD5

27471d058981990620cbd14418325784
SHA1

55917219c7dede6b4c97935abba62482b5b63804
SHA256

68281a0d59ca8795c8232828597d7174788416d5ee7c423ac177d0cd9b3ed0c0
SHA512

7ff0b3c42a10a92ad813ea4872cd75ff19c9aab96daa211afd53049758c469095e2c71b7865e0a355f1b10f80660c2e6e8e021e3915ef2d3f95baa562591522f
SSDEEP

24576:VBw1mKbUZIsXrU63h09kNR8YyOvG+84NFIW6kt0evKCpA0pexjSeHYN2hprXQVzm:cmm07rU6xQv9Ovd5T6qX0jXYN2nzY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27471d058981990620cbd14418325784

Files

27471d058981990620cbd14418325784
.exe windows:4 windows x86 arch:x86

dbea47c0cd6af6c443ef1ef9e0fd8223

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

Sections

CODE
Size: 1.5MB - Virtual size: 13.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE