27c6a530e38df2331350b41bba80a994 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27c6a530e38df2331350b41bba80a994
Size

16KB
MD5

27c6a530e38df2331350b41bba80a994
SHA1

cd4024537622fc73e7776cce8b142fc732d55062
SHA256

7c4533b04eb43190db8ceaf8b5aada0c5bed88022862bf7b977206f12a799a8b
SHA512

27fca7f1cb421541d3490298d8c05f2ed617b5fb008989f099a8e3f8bad07ae13b2ca50f05b462eb9338b135d0d3ecb74ff264c7ee37e2204cbfda2b313e9625
SSDEEP

192:pmGwWfwFtGaQCUKFIBum19NHMD7JddgrVXcmNxxJqs3mhAS:pKWytPZUW9mZHMD7Jvkcm37qoy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27c6a530e38df2331350b41bba80a994

Files

27c6a530e38df2331350b41bba80a994
.exe windows:1 windows x86 arch:x86

5b052913ad57def32d5cd816cef2f96f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
ExitProcess
GetFileSize
GetModuleFileNameA
GetProcAddress
GetTempPathA
LoadLibraryA
ReadFile
SetFilePointer
VirtualAlloc

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE