27351459df0f038c32ea837f393e900fa2a975b7793448aa46ad03abbd5c57e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27351459df0f038c32ea837f393e900fa2a975b7793448aa46ad03abbd5c57e4
Size

120KB
MD5

6f663f7770c266129151ecf1b9d46738
SHA1

41dcfbbc49ab8d305bc0c0fce817a5adc7612d16
SHA256

27351459df0f038c32ea837f393e900fa2a975b7793448aa46ad03abbd5c57e4
SHA512

46cefc87a8ddb83f931a308589ca3abf40039e337ad1c0e6897ab0d47833066f1ce7b0db6249f5c28f411019e4af78da8e468e8090f2fa7ed5e81d66c4c53941
SSDEEP

1536:Yy5wKt/5/1dqT5bUy3Kl63yEew7fT9KBNv275Cu4UY0Hqn8Q2R+soO7oZuTp:Yy5wk/ZuNNK5EeIr9aN+7xQ2RdoOC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27351459df0f038c32ea837f393e900fa2a975b7793448aa46ad03abbd5c57e4

Files

27351459df0f038c32ea837f393e900fa2a975b7793448aa46ad03abbd5c57e4
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ