b727d63c3676448071094afc9e1d6724 | Triage

Sharing

General

Target

b727d63c3676448071094afc9e1d6724
Size

54KB
MD5

b727d63c3676448071094afc9e1d6724
SHA1

21559132cf8156f1c99706f6d9dccd0b02b04929
SHA256

04560acb793411f9fc29f899585c2ea3ff2c4c3bdc841713c410688ffa1585a5
SHA512

aef16b135292a0a1bd9fcd921d9624b5b28bede8bdcf224aa65f955bcc419a75d3a5330d4a2f5a438b752420dd98f82935f5a31973a5c25b8d5810c508a54d95
SSDEEP

1536:7ZYN7FXKh5quKQBY261e5PBIr0O0EXcdCjEMGyuV:9epSCy9CJ0EXcdVMGN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b727d63c3676448071094afc9e1d6724

Files

b727d63c3676448071094afc9e1d6724
.exe windows:4 windows x86 arch:x86

c8d2d9f672786803dcd611ea74090ebd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

InvertRgn
PolyPatBlt
RectVisible
CreateRectRgn

msvcrt

__p__wpgmptr
_copysign
__p__tzname
_mbsnicmp
_dup
_getws
_inp

kernel32

GetCurrentProcessId
GetThreadLocale
CreateEventW
GetCommConfig
LocalAlloc
LocalHandle

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE