c27a02fa711d1711f6b7e99e4d1899a0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c27a02fa711d1711f6b7e99e4d1899a0N.exe
Size

63KB
MD5

c27a02fa711d1711f6b7e99e4d1899a0
SHA1

e4a0b01ab24bbc72b10f3fbaac5947e9918059bb
SHA256

a02df1568fa744e9abb6339defc7c436129f04554b1c7b87bd74726d0481fc7a
SHA512

ab04463e55ae2146a91bf150176cfac3c72d8c78326a9c4a65b2a92f7782a9dacc78e9ec076ae43e1bfa41715e2b4f1d9b72d0557d30f039e7a68d88c24e8ce6
SSDEEP

1536:hkhFBaXXTOFmnUWpgIHHTxdyIx9vCNVdOkkAqd2n+IU:hkhTaKQUkgIHzx42vCIrAqd++IU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c27a02fa711d1711f6b7e99e4d1899a0N.exe

Files

c27a02fa711d1711f6b7e99e4d1899a0N.exe
.exe windows:4 windows x86 arch:x86

aec263b8298de0fb29260bb8bf9d95aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSetInformation
ClosePrivateNamespace
IsWow64Process2
GetWriteWatch
SetThreadStackGuarantee
ResizePseudoConsole
UnmapViewOfFileEx
FindAtomA
GetCompressedFileSizeTransactedW
GetCurrentProcessorNumber

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE