a27b730d919e203c40cc3ee5971fa525 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a27b730d919e203c40cc3ee5971fa525
Size

2KB
MD5

a27b730d919e203c40cc3ee5971fa525
SHA1

53bb05c2eae71563628258fb3e13f0f2d626767f
SHA256

ebdbaf3650ca860a144eccbbaab98d14aa8039bd3d227a14ea2b15dee619d14a
SHA512

e8c620a8eec90791f12722553bd1a9a18eeeb20d13b2500093a884475174c5df87ef2db769a33c6854ae7242f26005df372f6555b10b059188ec1c26be1bfb99

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a27b730d919e203c40cc3ee5971fa525

Files

a27b730d919e203c40cc3ee5971fa525
.exe windows:4 windows x86 arch:x86

175c1a8fe6ca97a2b81c04427036141f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
SetCurrentDirectoryA
CreateProcessA
GetModuleHandleA
GetCommandLineA
WaitForSingleObject
GetExitCodeProcess
ExitProcess
CloseHandle

user32

wsprintfA

advapi32

OpenServiceA
OpenSCManagerA
ControlService

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 512B - Virtual size: 463B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ