27c0ec0e7aec26fe26826223b4d200a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27c0ec0e7aec26fe26826223b4d200a0
Size

114KB
MD5

27c0ec0e7aec26fe26826223b4d200a0
SHA1

7bd72e0a5077a82d21a4f88ef39785368a44775c
SHA256

12a07f77cb90bcf4b01e5af399ab0cffe0236049638ce736c019f7c5ea73311c
SHA512

b65604984cbcd3f8088ad27271ae460d43d57e17cdf1838b0b1d535f6fe972b16f16a3d648069bdcf7aabf319654b132b599c7cab97d996798ee889de8b3c39d
SSDEEP

1536:b8vYDGyQiEF8KZ4799CRdNEmsF6OC0FdlDucmfjkhiYG7fhVLEeT6MCLAQvg:b8aGYIxZ/EFSIdlDuTfjkIYGr36M9Qvg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27c0ec0e7aec26fe26826223b4d200a0

Files

27c0ec0e7aec26fe26826223b4d200a0
.exe windows:1 windows x86 arch:x86

cb49e815ad55122ad13a7ddc7ef84bc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__set_app_type
_exit
_acmdln
__getmainargs
__p__fmode
exit
_except_handler3
_strupr
memcpy
_controlfp
__p__commode
fgetws
_initterm
_XcptFilter
__setusermatherr

comctl32

ImageList_Create

kernel32

LCMapStringA
GetSystemDirectoryW
GetCurrentDirectoryW
VirtualAlloc
GetModuleHandleA
InterlockedExchange
GetStartupInfoA

user32

SystemParametersInfoA

comdlg32

PrintDlgA

ole32

CoSetProxyBlanket
CoInitialize

shell32

SHBrowseForFolderA

version

GetFileVersionInfoSizeA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ