27c1ef74c77b6166f37f38f01b3e4cc8 | Triage

Sharing

General

Target

27c1ef74c77b6166f37f38f01b3e4cc8
Size

174KB
MD5

27c1ef74c77b6166f37f38f01b3e4cc8
SHA1

fd01ec2cff2038cd0aede58f92d3426aba9df77a
SHA256

04c7076f47ebb0f0ca9196c5caf0d5f5877d747ee69a5aa33e1ef6a4bbeb331a
SHA512

fb97ba43a58c9f5e653547d5c2a9620e64e9335285aa0dcd95b7f4184bea3de9d288b103b11d5604180207d50a1f55b138cbb236a2a50b144c2bed2f7ab816f7
SSDEEP

3072:pVzjzrYQkED9OyNCevQEuEccXG/QVe2xm3/4XN1CBscyIeJIkUPfLriuxY08t:pVzjsEJOyNPQUXYQNxs/aN1CHj/k6f6v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27c1ef74c77b6166f37f38f01b3e4cc8

Files

27c1ef74c77b6166f37f38f01b3e4cc8
.exe windows:0 windows x86 arch:x86

4bda570ce112adc211f3bd7fa6b82f33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
GetProcAddress
VirtualProtect

msvcrt

malloc

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QW0
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QW1
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QW2
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 6B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ