8c27bacc1facacb11d7fd38c95e66dc3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c27bacc1facacb11d7fd38c95e66dc3
Size

415KB
MD5

8c27bacc1facacb11d7fd38c95e66dc3
SHA1

8cb31de9a61fa3e823535e5be3e1898c49c04e55
SHA256

e73d9e2dd2dfa12cba13c5d11577b6cec6ef660a2883f6cfad49b080340f8128
SHA512

8b55fcb2e2c86465e55af9587a076345da934f34b361226ffa0922387d065f9d35ef374c09ecd11e0a63b8b2192bdbbe53ee7f70c60520c489ac4783219a8d07
SSDEEP

6144:G1ojUwD3TilJTq4y+ydvMQp7Tmd7xG8twYU42vw:GKowTWTq4yzd/tS7U8tEn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c27bacc1facacb11d7fd38c95e66dc3

Files

8c27bacc1facacb11d7fd38c95e66dc3
.exe windows:4 windows x86 arch:x86

c2cbc2be2894735cca85d980768ba25a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
RaiseException
GetCommandLineA
GetLocaleInfoA
GlobalFree
GetLogicalDrives
GetACP
GetFileAttributesA
SetErrorMode
EnterCriticalSection
GlobalAddAtomA
GetSystemDirectoryA
GetStdHandle
HeapCreate
CloseHandle
GetLastError
Sleep
InterlockedExchange
VirtualProtect
GlobalDeleteAtom
LockResource

user32

GetCursorPos
ReleaseDC
GetParent
SetForegroundWindow
wsprintfA
DrawTextA
IsIconic
GetFocus
GetWindowTextA
ValidateRect
GetWindow
DrawEdge
FrameRect
GetClassNameA
EndPaint
BeginPaint
GetActiveWindow
GetMenuItemInfoA
ShowWindow

httpapi

HttpTerminate
HttpCreateHttpHandle
HttpRemoveUrl
HttpInitialize
HttpAddUrl

wshtcpip

WSHNotify

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ