27f29e11cfebca5540b614aec78576d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27f29e11cfebca5540b614aec78576d3
Size

80KB
MD5

27f29e11cfebca5540b614aec78576d3
SHA1

dcacb592005a97ff77957d1f7358b8e60b922ab9
SHA256

861bceff25c4ec338341479c0656e1437ad398be28619eff1a6093615cc73991
SHA512

4d0a10ffdb03739e24166e3187ca40d988863c95fbc6d8b72048ca76c29acc1f5b55f9155f90e98311bfbf4bee3dde80c5aa6face99ab62f2af26c99d7eada7f
SSDEEP

1536:cmgVPtbDdXW7zI1BkfH3FBs6eGsktFHT4oqGeH2:qttbhQZfH37feqtNcoqGj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27f29e11cfebca5540b614aec78576d3

Files

27f29e11cfebca5540b614aec78576d3
.exe windows:4 windows x86 arch:x86

0ff1a7e7555cad510975daef7c33c22a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ