27e6c8dd76f21d0223ee279ffb961943 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27e6c8dd76f21d0223ee279ffb961943
Size

20KB
MD5

27e6c8dd76f21d0223ee279ffb961943
SHA1

9e48ba79c63f2853ee4c0ad0b37620e7068d4643
SHA256

36a36aec08e7cdb4febe85be1ebf2ec0b25dcff6382967cc4ae6c393df57a77f
SHA512

95ade6177023b77f396065203bb77dec35c85e9e3fa1ed298c31d709c665eca9b9dc3d87ae9f67e003b2bad9ea76c83fd92c0cddb7db4057066e9f13979d0ece
SSDEEP

384:cORRbfap072nwAmy4kVWKVczwoVKtVOl0szto:/fSpxwavczwootIl0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27e6c8dd76f21d0223ee279ffb961943

Files

27e6c8dd76f21d0223ee279ffb961943
.exe windows:4 windows x86 arch:x86

83bd43edd66cf250bf2209cd445bea10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
CreateEventA
GetFileAttributesA
lstrcatA
GetProcAddress
SetEvent
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
lstrcpyA
lstrlenA
SetFilePointer
SetFileAttributesA
CreateThread
WaitForSingleObject
GetVersionExA
WriteFile
ExitThread
GetTempPathA
ExitProcess
RtlUnwind
CreateFileA

user32

MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
ShowWindow
CreateWindowExA
SetThreadDesktop
CreateDesktopA
CharToOemA
EndPaint
wsprintfA
DestroyWindow

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ