2f27e863b26b47d2def26662c21c2c7a6a7fbb901efbb07e241656ed7d6caa03N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f27e863b26b47d2def26662c21c2c7a6a7fbb901efbb07e241656ed7d6caa03N
Size

941KB
MD5

f941b63df5eb13d3fbc497d3ce9a5960
SHA1

0727dc96f7ae0a75001828d9f5b3f05238460812
SHA256

2f27e863b26b47d2def26662c21c2c7a6a7fbb901efbb07e241656ed7d6caa03
SHA512

ba420903d59b5a3ba5026beab6d944ac9416a87a76fc33ba11b83525e711aa5ab8619deba6b1ab33c31cca992eda0d3c6603dfe4e7f74281e53c2cf9269fd058
SSDEEP

24576:cFv+GrqJcNt28iBEXp3+qLHh07HoYQ6KZo7DqYQ:CvLFtdRXNHe7HA6KZo7OZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f27e863b26b47d2def26662c21c2c7a6a7fbb901efbb07e241656ed7d6caa03N

Files

2f27e863b26b47d2def26662c21c2c7a6a7fbb901efbb07e241656ed7d6caa03N
.exe windows:5 windows x86 arch:x86

82daa26ff4d05b7c77ba415bfedd5773

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LCMapStringA
CreateFileA
LoadLibraryA
GetCurrentProcess
CloseHandle

user32

CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA
CloseWindow

advapi32

RegEnumValueA
RegDeleteValueA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 495KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ