27ef92c388b95fd6b882d7d3fe403e8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27ef92c388b95fd6b882d7d3fe403e8f
Size

112KB
MD5

27ef92c388b95fd6b882d7d3fe403e8f
SHA1

ee76b2c4bad0886df7f2e88c87d677eba8edfdf4
SHA256

09e17e1e2c56937d8fd70b6047197b1472b0389a9b986f30da5ba6297a54267d
SHA512

faf5cc0c9ebe0561f914a4f9b8867854006584db26562f9e68470f558d382f978ed23c83fa323eee0202a6d5bb86503ba594ca04768ae8457ec3fcb0adc8dd1d
SSDEEP

3072:AONR5SgAFN0YBIcfrIvauBeYH5SsnH82Vw:5bAj0YrfGZH5r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27ef92c388b95fd6b882d7d3fe403e8f

Files

27ef92c388b95fd6b882d7d3fe403e8f
.dll regsvr32 windows:5 windows x86 arch:x86

16696b7d95fd51fe5f3555ae1eb46387

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
sprintf

advapi32

RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcessId
OutputDebugStringA
QueryPerformanceCounter
GetTickCount

Exports

Exports

DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ