27a78f57aa4f05ff67a9291adb4d6650N[.]exe | Triage

Sharing

General

Target

27a78f57aa4f05ff67a9291adb4d6650N.exe
Size

4.6MB
MD5

27a78f57aa4f05ff67a9291adb4d6650
SHA1

e889619b075beeacd56fd3615f4f0cc83a475b29
SHA256

866c5a1f26ad8caa1e36a59d3723650ba60189cddaddd9d0df18feda59c51ce3
SHA512

bae54ab0c5adcbec75bf094ca6769be01248ef9cdecff65824bf77064fba808d66813556fd7b4d0e1a023250d0335911de6883cbfdf1c43f153a95d9a2101e4e
SSDEEP

98304:NPMvLNHzP6JliHXLa41RaywJkwon+AoQ69fYWF8irG4FjXLPp:NiiMHr1R12kOAFSYAhHXLh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27a78f57aa4f05ff67a9291adb4d6650N.exe

Files

27a78f57aa4f05ff67a9291adb4d6650N.exe
.dll windows:6 windows x86 arch:x86

b4ca6f0ad0fe5ce382aa3bee0f2fba93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Exports

Exports

_SbieDll_Hook@16

Sections

.text
Size: - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.~Om
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nRS
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Ps:
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ