027c700561044233875e5b9b3ce030d10bab27fcad36823c6d368d44bd738e04[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

027c700561044233875e5b9b3ce030d10bab27fcad36823c6d368d44bd738e04.exe
Size

697KB
MD5

68c4b68c01cd43530458ac01b4431c12
SHA1

f8f271774ab18ee4fa3bffac22bfc094ba3ccbf3
SHA256

027c700561044233875e5b9b3ce030d10bab27fcad36823c6d368d44bd738e04
SHA512

e9fa39f82139a7862f8f52d8df0c70a29b0e0988ce777edbe4dfcaca96717da4c21c3315a5f821710fafa0808a01d2f4b40bfca9b56cc90d238180abaad1cc41
SSDEEP

12288:xf+/A64Ydx6CxLHSYd0Cl4N61WhYtyDaFbNui02rc7Wv62zT:W56IpC24s/v6+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
027c700561044233875e5b9b3ce030d10bab27fcad36823c6d368d44bd738e04.exe

Files

027c700561044233875e5b9b3ce030d10bab27fcad36823c6d368d44bd738e04.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB Paths

c:\users\ut0045\my_it_applications\raph\1\krbuacbypass-master\KRBUACBypass\bin\Release\KRBUACBypass.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 695KB - Virtual size: 694KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ