27c0935a22862475bb3fd516f93bd466f8021f77727e83f53d67d76978b439ee

Sharing

Copy URL

Twitter E-mail

General

Target

27c0935a22862475bb3fd516f93bd466f8021f77727e83f53d67d76978b439ee
Size

648KB
MD5

c73715e14f2de81195606feb4446e227
SHA1

ab9708fcfc118edecced4facbab0f731174ba812
SHA256

27c0935a22862475bb3fd516f93bd466f8021f77727e83f53d67d76978b439ee
SHA512

cff44b75d487fdf1dfea3b7431c94c13540762896a65350aee239062aa0012227411eb30b1005feacfe5f71b4335fb9991c52ae0d6dce708e0dc62f562c3302c
SSDEEP

12288:gH+t7TZlZpmbB6InNHAqVio+4XbYVBx1b+i:VfbpwdgqVi94XbY7b+i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27c0935a22862475bb3fd516f93bd466f8021f77727e83f53d67d76978b439ee

Files

27c0935a22862475bb3fd516f93bd466f8021f77727e83f53d67d76978b439ee
.dll regsvr32 windows:10 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

AzAddPropertyItem
AzApplicationClose
AzApplicationCreate
AzApplicationDelete
AzApplicationEnum
AzApplicationOpen
AzAuthorizationStoreDelete
AzCloseHandle
AzContextAccessCheck
AzContextGetAssignedScopesPage
AzContextGetRoles
AzFreeMemory
AzGetProperty
AzGroupCreate
AzGroupDelete
AzGroupEnum
AzGroupOpen
AzInitialize
AzInitializeContextFromName
AzInitializeContextFromToken
AzOperationCreate
AzOperationDelete
AzOperationEnum
AzOperationOpen
AzRemovePropertyItem
AzRoleCreate
AzRoleDelete
AzRoleEnum
AzRoleOpen
AzScopeCreate
AzScopeDelete
AzScopeEnum
AzScopeOpen
AzSetProperty
AzSubmit
AzTaskCreate
AzTaskDelete
AzTaskEnum
AzTaskOpen
AzUpdateCache
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 388KB - Virtual size: 388KB

.rdata Size: 149KB - Virtual size: 148KB

.data Size: 15KB - Virtual size: 15KB

.pdata Size: 16KB - Virtual size: 16KB

.didat Size: 512B - Virtual size: 456B

.rsrc Size: 46KB - Virtual size: 45KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 388KB - Virtual size: 388KB

.rdata
Size: 149KB - Virtual size: 148KB

.data
Size: 15KB - Virtual size: 15KB

.pdata
Size: 16KB - Virtual size: 16KB

.didat
Size: 512B - Virtual size: 456B

.rsrc
Size: 46KB - Virtual size: 45KB

.reloc
Size: 12KB - Virtual size: 12KB