27658caf526320204d2bbb801c003e43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27658caf526320204d2bbb801c003e43
Size

52KB
MD5

27658caf526320204d2bbb801c003e43
SHA1

99d3cf8cdac9a6462585de55aae2dc9c721f7ed9
SHA256

08c87688e2beb287ac2061b9f113cbbede569f8faf7d9f3010bbee6c3724cea2
SHA512

7eb1de3616746dcebc8e29aad85f2c64caaa3dbf7cce7117a1248f63e31f583e3377832d3167929f6baec2deabaa2fc276fc790ac3def1ca366b90d4ef9dec8c
SSDEEP

1536:jV3sb8rKvQzBwlzWMci7cbq9bpMW81p/qcKZQC:j6b8rBOFGccbq9bpFehqcB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27658caf526320204d2bbb801c003e43

Files

27658caf526320204d2bbb801c003e43
.dll windows:4 windows x86 arch:x86

f9341d105d804e406a04c688ff0c4c14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

strstr

kernel32

WriteFile
Sleep
FlushFileBuffers
ExpandEnvironmentStringsA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
DeleteFileA
SetFilePointer
CreateFileA
MoveFileA

advapi32

ControlService
StartServiceA
OpenServiceA
OpenSCManagerA

Exports

Exports

_beep@0
_sleep@4

Sections

.text
Size: 1024B - Virtual size: 526B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 771B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ