272dc69eba26202a32322dcf336689504285695bbd0f7e0815d0f91e51340dcd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

272dc69eba26202a32322dcf336689504285695bbd0f7e0815d0f91e51340dcd
Size

68KB
MD5

d3471e7ff1261341d108ef7923180032
SHA1

f02b12173886c04febf0ca7466e3e1fcf40da82f
SHA256

272dc69eba26202a32322dcf336689504285695bbd0f7e0815d0f91e51340dcd
SHA512

736fc3b87956754773eca59eb15cb8c97e621e3d67c1a3884afe4e46ca87db0ae9969654fa1c6fac9d2f1ab8d1320b17bff93bea1f18b5db64be8936295dd2b5
SSDEEP

1536:UjWOW5XkcSkzsSQH3WUL6LVyFR05z+uDXdV2KRaIWUL65:UeBSkuWUL6FWUL6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
272dc69eba26202a32322dcf336689504285695bbd0f7e0815d0f91e51340dcd

Files

272dc69eba26202a32322dcf336689504285695bbd0f7e0815d0f91e51340dcd
.exe windows:4 windows x86 arch:x86

00dbdae2c04e663066d085ed815435d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
SetCurrentDirectoryA
GetProcAddress
ExitProcess
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ