27cc7a157db21ddcd04a85e43c2ee0a2 | Triage

Sharing

General

Target

27cc7a157db21ddcd04a85e43c2ee0a2
Size

127KB
MD5

27cc7a157db21ddcd04a85e43c2ee0a2
SHA1

4146c746028b79d5baf0908a5107c66df8c4c198
SHA256

e4ac9ebad9a91364384c8be82143d1bf12975bea727df8a8379f7e94b1651d98
SHA512

a493a07f137f2ede26909b8fe651f0091d060fca0ad986102ab00be512e31e949c3843020cec49a855d99e6b008c44dcca32e102768d6cbae986f1e6c8e9eb1c
SSDEEP

3072:DohWT9eFeCGqcldG7OZUBIsyWrqWXmpH07cTG8x:dpo+7UGnWG150eTx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27cc7a157db21ddcd04a85e43c2ee0a2

Files

27cc7a157db21ddcd04a85e43c2ee0a2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

g723AreYouThere
g723FrameDecode
g723FrameDecodeInitialize
g723FrameDecodeTerminate
g723VolumeControl

Sections

.shrink0
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 971B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shrink1
Size: - Virtual size: 152KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.shrink2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.load
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ