27917034d341a5d53e6b1fe53321661e5ff871d837406eb7b0a89f96a072921e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27917034d341a5d53e6b1fe53321661e5ff871d837406eb7b0a89f96a072921e
Size

2.1MB
MD5

d559812dc596d0c44db49fb8b85bd0cb
SHA1

82950813cd338c6e672f3871cd62c37ba380c20f
SHA256

27917034d341a5d53e6b1fe53321661e5ff871d837406eb7b0a89f96a072921e
SHA512

80f0bc91db5ccdee98978ade224381c73ee520d6d104e7787fb4c9027dc39ace3095c66c47acb5577a7f08ecc252fe194ea99caf062b47cbab411e989e8d2b07
SSDEEP

49152:26tpKHoCTuf0IHGPAjDA20cA1jgFX8Z3:2UKHoZ0ImIj6cfB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27917034d341a5d53e6b1fe53321661e5ff871d837406eb7b0a89f96a072921e

Files

27917034d341a5d53e6b1fe53321661e5ff871d837406eb7b0a89f96a072921e
.exe windows:5 windows x86 arch:x86

de74ae176f35e63acdfad28f3335124a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames

kernel32

HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 978KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yr.
Size: - Virtual size: 777KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.1.b
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gq=
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ