27ed2f0e51040c3233559a02feabffe0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27ed2f0e51040c3233559a02feabffe0N.exe
Size

66KB
MD5

27ed2f0e51040c3233559a02feabffe0
SHA1

772a2a6b3251ae4f7357181a9b93a41ffa8604f9
SHA256

ca84b27d2c9d1440cdcf512fb7ff640ca60a0e8185db1d87c0b7f80010314967
SHA512

47723a98df4a57396a9f5985978e11434f1e0c3d2abddb1a745ff4defe8daebbcc2e5e056c368e1ba7942e1ec65ccc00f4dd8d2aaf671c6cf90179c26d4e9d3c
SSDEEP

1536:f6GcF5F2zlqi4H5RgCE3O0eFVhby9a1hbQu4Lbt8RJBJhTBJvXOB5lIRG2AZIbxQ:fWyW3/JJDsVPBuFZHYj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27ed2f0e51040c3233559a02feabffe0N.exe

Files

27ed2f0e51040c3233559a02feabffe0N.exe
.exe windows:4 windows x86 arch:x86

ebf161872d31c7c0491d4f09084a6ef8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleNlsMode
ExitProcess
GlobalCompact
IsThreadpoolTimerSet
LoadLibraryExW
FindFirstVolumeA
GetTempFileNameW
lstrcatW
SetDllDirectoryW
WerUnregisterAppLocalDump
TermsrvAppInstallMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE