27539915f9c40181e04ab66c06930b86 | Triage

Sharing

General

Target

27539915f9c40181e04ab66c06930b86
Size

435KB
MD5

27539915f9c40181e04ab66c06930b86
SHA1

9b1b2085d0589d77adc48840d39cd9b621783276
SHA256

e5be7d0233e2bd6b271ffe613bc853259eaa3644f7f097a7e53f7c3d4812bca9
SHA512

ad2b816917d5aca91284d2ef82f497ed8ffbb6a5e6ead1d349b4a8b3c034cb68c7d596ab711cf6a0013a62dcf4eefdb92626fc8ce22069b662ee97bd22208171
SSDEEP

6144:9GLPZDxwr+ZjHihJ2sC9EZFluNy3CIMPY7C5RqjXRECs5dYUIHL1Gwodf:Qq+Zzy2zAFluCo8jpsBIHwjdf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27539915f9c40181e04ab66c06930b86

Files

27539915f9c40181e04ab66c06930b86
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dhw1n.wl
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

izfqr07l
Size: 258KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

v.56m5mu
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ