27d5ed2ae771a54145dfe043fed16c34bfea7588c83b9c6d1ab6d32ea00cdd36 | Triage

Sharing

General

Target

27d5ed2ae771a54145dfe043fed16c34bfea7588c83b9c6d1ab6d32ea00cdd36
Size

120KB
MD5

56488808ea715b20dd1687f93ccfae31
SHA1

7155c577e18bb00a1c9eb69caefa121dc09d50a1
SHA256

27d5ed2ae771a54145dfe043fed16c34bfea7588c83b9c6d1ab6d32ea00cdd36
SHA512

d748bf5ae9077a9edf5d0ee0f0ec5ee7b5fb2bfec23cfd8e4d0628a39246860ec8ced7e012980141e5184958ac0fc04a38c4558fc68f2f9319335e499015935c
SSDEEP

3072:3nmsK4rJ4vbDUXYY3gYuMHIPhhchYYGmPwxanfvnk:XYMJ07Y7zGmPwx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27d5ed2ae771a54145dfe043fed16c34bfea7588c83b9c6d1ab6d32ea00cdd36

Files

27d5ed2ae771a54145dfe043fed16c34bfea7588c83b9c6d1ab6d32ea00cdd36
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ