27a920ef3cbe35cf109f6e9e8126d883 | Triage

Sharing

General

Target

27a920ef3cbe35cf109f6e9e8126d883
Size

521KB
MD5

27a920ef3cbe35cf109f6e9e8126d883
SHA1

80aa587dd2158a2b2ef0b08bf1c80bcb7b5c8404
SHA256

eecff4b0337690fc59052dbbc5320b1199805f5c57273eb19e092224fdfa3850
SHA512

998a5ff677c81e6d42b42ce60307c51a5bd4ab95ed8edd9e1a79718694cb0d6c3d466950b49da834e495068b8d6228b356634d4871b77ac157644c676bbbc2dc
SSDEEP

6144:vlwkTgNBgvCs2cyy+4c4+b5mAKv8GCRyZwMG4DKhfOym8uI1NyRbj7wLR0LCGZJz:vlwigNSaTft5KpZS4DK1O6/Mq4FQC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27a920ef3cbe35cf109f6e9e8126d883

Files

27a920ef3cbe35cf109f6e9e8126d883
.exe windows:4 windows x86 arch:x86

8a22f182fd2264867690da687bfe64b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

advapi32

OpenServiceA

wsock32

send

netapi32

Netbios

oleaut32

SysFreeString

ws2_32

htons

msvfw32

DrawDibDraw

avicap32

capCreateCaptureWindowA

winmm

waveInOpen

urlmon

URLDownloadToFileA

mpr

WNetGetUserA

user32

CharNextA

wininet

InternetOpenA

gdi32

SaveDC

comctl32

ImageList_Add

shell32

ShellExecuteA

version

VerQueryValueA

Sections

.text
Size: 512KB - Virtual size: 744KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pep
Size: 17B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE