27cd1af5ec2f593d4606be1490b859e17f21962875bf8a84e8c7cb2ffc16a0c5 | Triage

Sharing

General

Target

27cd1af5ec2f593d4606be1490b859e17f21962875bf8a84e8c7cb2ffc16a0c5
Size

120KB
MD5

4670b92a45b761e80551f1204d0ed37b
SHA1

64153cb609ef94bedce28a7668ea8c89e43e9b2b
SHA256

27cd1af5ec2f593d4606be1490b859e17f21962875bf8a84e8c7cb2ffc16a0c5
SHA512

1ed203cada6c01aa96c0d6c9e72ff9448e5d47eeba906947fe7c4e7bcaaa9447c9ee3c8daf9129113aa5bb9e21f995640cf5e7c1ecae1f60dd66bd5748813287
SSDEEP

3072:9tdMXRZkyjQAoOivIzPWTvKqd2H5sumP9+8cYh3:ikEGMWTvNIeuh8c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27cd1af5ec2f593d4606be1490b859e17f21962875bf8a84e8c7cb2ffc16a0c5

Files

27cd1af5ec2f593d4606be1490b859e17f21962875bf8a84e8c7cb2ffc16a0c5
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ