27c8ed4884cf0798f8bd2524c46a8b03

Sharing

Copy URL

Twitter E-mail

General

Target

27c8ed4884cf0798f8bd2524c46a8b03
Size

468KB
MD5

27c8ed4884cf0798f8bd2524c46a8b03
SHA1

2d5fed5f3b1f3dea6b786cb98b43aff83c1265c9
SHA256

1c06c78b3cdd74bf63561296ae7e0745e0fb37cc0172d2a44da89c10dbe9c7cd
SHA512

2dc9125f95aa1ebde818d5113350d0b287ce6263d505debe13c60b844b77112730ef86c6929014ca9cbefd16829a52e230b5874e7dd7f212a798fea69c01f4c2
SSDEEP

12288:+tGLxvT4/WA8gdj8x38VJ0jTZ9e6Fje67:+0x7VONa38VJAS6Fje

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27c8ed4884cf0798f8bd2524c46a8b03

Files

27c8ed4884cf0798f8bd2524c46a8b03
.exe windows:4 windows x86 arch:x86

3c39795221ee04dcd8f58a81313bf81c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

GetEnvironmentStringsW
GetStartupInfoW
GetProcAddress
GlobalAddAtomA
GetNumberFormatA
DeleteCriticalSection
GetLastError
FreeEnvironmentStringsA
HeapReAlloc
LoadLibraryA
GetStringTypeA
GetFileType
CloseHandle
GetEnvironmentStrings
GetTimeZoneInformation
SetCriticalSectionSpinCount
TlsFree
GetModuleFileNameA
TlsSetValue
HeapAlloc
FlushFileBuffers
WideCharToMultiByte
SetHandleCount
InterlockedDecrement
GetStdHandle
SetConsoleCursorInfo
TlsAlloc
GetFileSize
IsBadWritePtr
GetStartupInfoA
InitializeCriticalSection
EnumSystemCodePagesW
GetCommandLineW
CreateMutexA
GetCurrentProcess
GetModuleFileNameW
CompareStringW
LCMapStringA
GetCompressedFileSizeW
SetLastError
TlsGetValue
InterlockedExchange
LCMapStringW
RtlUnwind
TransmitCommChar
GetCurrentThread
MultiByteToWideChar
UnhandledExceptionFilter
GetLocalTime
SetStdHandle
GetCommandLineA
OpenMutexA
InterlockedIncrement
lstrlenW
GetCPInfo
VirtualAlloc
SetConsoleCP
GetVersion
GetSystemTime
GetTickCount
CompareFileTime
WriteFile
ExpandEnvironmentStringsW
ExitProcess
HeapDestroy
CompareStringA
LeaveCriticalSection
SetFilePointer
VirtualFree
HeapFree
EnterCriticalSection
HeapCreate
FillConsoleOutputAttribute
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
TerminateProcess
SetEnvironmentVariableA
GetCurrentProcessId
GetCurrentThreadId
FreeEnvironmentStringsW
ReadFile
GetModuleHandleA
VirtualQuery
GetDiskFreeSpaceA
GetStringTypeW

user32

BroadcastSystemMessage
GetUserObjectInformationA
CopyImage
SetMessageQueue
GetWindow
GetMenuStringW
RegisterClassA
RegisterClassExA

Sections

.text
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 313KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c39795221ee04dcd8f58a81313bf81c

Headers

File Characteristics

Imports

comctl32

kernel32

user32

Sections

.text Size: 147KB - Virtual size: 146KB

.rdata Size: 4KB - Virtual size: 17KB

.data Size: 313KB - Virtual size: 312KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 147KB - Virtual size: 146KB

.rdata
Size: 4KB - Virtual size: 17KB

.data
Size: 313KB - Virtual size: 312KB

.rsrc
Size: 3KB - Virtual size: 3KB