27898f445d007a4c28b3b58eaacdac3f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27898f445d007a4c28b3b58eaacdac3f
Size

130KB
MD5

27898f445d007a4c28b3b58eaacdac3f
SHA1

8015fb503a78d71a5d5b4257560d3ed72bab5412
SHA256

bcf29f80e72c5ca3cdef2728929d84898963be0bd46b046969b2f715ebadceca
SHA512

2ff0aea9e97be4c7440d9b6d3f634ca796e9775bf613c89d520be90fea0fdee64ac8545b052ecba80309bd5a28780081328890df395d0945312081b3ec01ca2a
SSDEEP

3072:X1pGPqBc98Np1w0RaM/bacE/5LccNTHNIb8vRdYh6bXIRKn9jn:SSB39nRn/bQFccNH6wvgsrIRKt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27898f445d007a4c28b3b58eaacdac3f

Files

27898f445d007a4c28b3b58eaacdac3f
.dll windows:4 windows x86 arch:x86

04ca92fd91d242dffdbc2dabd9f321bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBeep
GetMessageW
EmptyClipboard

kernel32

GetStdHandle
SetConsoleCtrlHandler
LoadLibraryW
HeapDestroy
GetExitCodeProcess
FatalAppExitW
WriteConsoleW
DebugBreak
EnumSystemLocalesW
ExitProcess
TlsSetValue

advapi32

RegQueryValueExW
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ