27e94c9cd8f3d79176e9c86bbc8711c0N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

27e94c9cd8f3d79176e9c86bbc8711c0N.exe
Size

20KB
MD5

27e94c9cd8f3d79176e9c86bbc8711c0
SHA1

90b7f0bd46a1f21700dc2e479d764dc456bb66ef
SHA256

446e8595e826ea2ca58b00cbc9406fa5a3db4e50a03b095bd56a1a6468baed3f
SHA512

01b550ef4eef2254c32d8bae27a8ea192bdeb9d48392549fa1451962c545ed2b5963859890856564dc9fbb8052230778905f32ba305e34b15a7cd110de330b18
SSDEEP

384:WBh8ocZoEs1D6UuNB1oZLirH6udTZMjCXprqnOsjo:mhNcqNqX1AYau3MjQlsjo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27e94c9cd8f3d79176e9c86bbc8711c0N.exe

Files

27e94c9cd8f3d79176e9c86bbc8711c0N.exe
.dll regsvr32 windows:4 windows x86 arch:x86

6813a7bd5b5b50fca81dfc4ccbe46ebd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

eaicomcreate

EAIGetReferenceGUID
EAIUnregisterClass
EAIRegisterClass
??0CTypeLibWrapper@@QAE@XZ
??1CTypeLibWrapper@@QAE@XZ

kernel32

InitializeCriticalSection
DeleteCriticalSection
GetModuleFileNameA
FreeLibrary
DisableThreadLibraryCalls
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
lstrlenW
MultiByteToWideChar
lstrcpyA
lstrlenA
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
ExitProcess

ole32

CoCreateInstance

oleaut32

RegisterTypeLi
SysFreeString

atl71

ord23
ord32
ord15
ord56
ord18
ord22
ord61
ord64

msvcr71

sscanf
tolower
isupper
strlen
strncmp
??_U@YAPAXI@Z
__mb_cur_max
memcpy
_CxxThrowException
memset
_except_handler3
fclose
fgets
strcpy
fopen
sprintf
strncpy
strrchr
getenv
??3@YAXPAX@Z
strcat
??2@YAPAXI@Z
__CxxFrameHandler
_purecall
free
malloc
_resetstkoflw
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
_initterm
_adjust_fdiv
__CppXcptFilter
__security_error_handler
mblen
??_V@YAXPAX@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6813a7bd5b5b50fca81dfc4ccbe46ebd

Headers

File Characteristics

Imports

eaicomcreate

kernel32

ole32

oleaut32

atl71

msvcr71

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 1KB