c27372a98b51958bec2795892263f0ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c27372a98b51958bec2795892263f0ba
Size

246KB
MD5

c27372a98b51958bec2795892263f0ba
SHA1

3c25152768076ff779e7059baaa6bf369156746c
SHA256

d69c9bc522d2953842aae880cded53f435fd83e259c5a23e00b30a0b2d1ddfd6
SHA512

e915dcbcac0c71a5d196d9581128efe43e3f1fc6f8613c1c1481220de508bf61d1a0ef415b853afcb88bcca3709c6ae4544b2cc5625c29c25f6b486ebc87569b
SSDEEP

6144:UFqvtyR3Ir2LOSi/TXz3m8brmAJoSXidrUIZeZudTyXhB4oLoR:9yR3tLyTXz3hbrBXidNIulyXmR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c27372a98b51958bec2795892263f0ba

Files

c27372a98b51958bec2795892263f0ba
.exe windows:4 windows x86 arch:x86

098674db4f9e496f3ef4bce8c1821d02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
lstrcmpW
MulDiv
GetCompressedFileSizeA
SetLastError
WaitForSingleObject
HeapSetInformation
GlobalFree
DeleteCriticalSection
GetTickCount
MultiByteToWideChar
lstrlenA
GlobalHandle
FormatMessageW
InterlockedDecrement
InterlockedIncrement
CreateFileW
CloseHandle
LocalAlloc
GetLocaleInfoW
GetComputerNameW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
InterlockedExchange
OpenProcess

avifil32

AVIBuildFilter

oleaut32

GetRecordInfoFromTypeInfo
CreateErrorInfo
SafeArrayAllocDescriptor
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

Sections

.text
Size: 173KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE