272fcacc3b011a543903cad94f747330N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

272fcacc3b011a543903cad94f747330N.exe
Size

30KB
MD5

272fcacc3b011a543903cad94f747330
SHA1

b6a137712d2757915999f64b4b46cc6b042c4023
SHA256

1d1f2169f2456ba8079983a5dec35d1b978eb5655a214bd657096be6881de17a
SHA512

d797a91ae3bddaee7319bd86e6c88fb207a59d7ae0e717d2375e5e533b9109b9393e0f584e890f76cf7eb593f08d0199d85cf5df42f2500fbb0cd728f2cec179
SSDEEP

384:Q8hlBtIEFbpRPRUCeD8qXv3izeZR/ES5rBErZWfzBGREI:Q8TBtIEBpg3iqZZEAruofzBkEI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
272fcacc3b011a543903cad94f747330N.exe

Files

272fcacc3b011a543903cad94f747330N.exe
.exe windows:5 windows x86 arch:x86

29b31b8fd204e9d1ad4ef065c4aae843

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
DefWindowProcA
PostQuitMessage
LoadIconA
RegisterClassA

msacm32

acmStreamOpen
acmFilterChooseA

kernel32

GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
GetACP
ExitProcess
FreeLibrary
GetTickCount
GetCPInfo
InterlockedDecrement
InterlockedIncrement
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
RaiseException
GetOEMCP
IsValidCodePage
Sleep
HeapSize
SetHandleCount
GetStdHandle
GetStartupInfoW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
InitializeCriticalSection

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ