27ef27b61120a709590570f7fa86aa018f2e9b143bf97c4734720d2096b0bdf6[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

27ef27b61120a709590570f7fa86aa018f2e9b143bf97c4734720d2096b0bdf6.exe
Size

361KB
MD5

971a605d8e1e95d6cd4a2ff764f581e8
SHA1

bf656e6f8310e25b44311b081cbd91eee8aa39be
SHA256

27ef27b61120a709590570f7fa86aa018f2e9b143bf97c4734720d2096b0bdf6
SHA512

8d19d5cdb9b4373e97954e72c965e0d64edcf4e8d873972b3cc1fbcc06ce083a12feb3d145e77abd5bd2ec60128276c763ea7885acc97691639621b82d84a0f0
SSDEEP

6144:oLmMBjNWyWnDeXgacbtY0AwdH4PR1bhNzTP:oVBdWDeQpFvdH2hJD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27ef27b61120a709590570f7fa86aa018f2e9b143bf97c4734720d2096b0bdf6.exe

Files

27ef27b61120a709590570f7fa86aa018f2e9b143bf97c4734720d2096b0bdf6.exe
.exe windows:5 windows x86 arch:x86

490298ec3d59994d2a12f54c75b4c247

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalCompact
CommConfigDialogA
CreateProcessW
ClearCommError
InterlockedDecrement
GetCurrentProcess
SetEnvironmentVariableW
CreateJobObjectW
SetComputerNameW
GetTimeFormatA
GetCurrencyFormatA
GetConsoleAliasExesW
EnumTimeFormatsW
GetEnvironmentStrings
GlobalAlloc
SetFileShortNameW
LoadLibraryW
GetLocaleInfoW
ReadConsoleInputA
GetCalendarInfoW
SetVolumeMountPointA
GetFileAttributesA
CreateSemaphoreA
GetModuleFileNameW
CreateActCtxA
GetShortPathNameA
TlsGetValue
InterlockedExchange
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
CreateNamedPipeA
DefineDosDeviceA
GlobalFree
GetTempFileNameA
FindClose
LoadLibraryA
InterlockedExchangeAdd
CreateHardLinkW
GetNumberFormatW
OpenEventA
GetCommMask
GetModuleFileNameA
EnumDateFormatsA
GlobalUnWire
GetShortPathNameW
GetDiskFreeSpaceExA
GetVersionExA
SetFileAttributesW
LCMapStringW
VerifyVersionInfoW
GetComputerNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
GetStartupInfoW
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
HeapSize
TerminateProcess
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ReadFile
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoA
GetModuleHandleA
RaiseException
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA

gdi32

GetCharWidth32A

Sections

.text
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vebum
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rejoko
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

490298ec3d59994d2a12f54c75b4c247

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 282KB - Virtual size: 282KB

.data Size: 24KB - Virtual size: 70KB

.vebum Size: 1024B - Virtual size: 1024B

.rejoko Size: 512B - Virtual size: 214B

.rsrc Size: 47KB - Virtual size: 47KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 282KB - Virtual size: 282KB

.data
Size: 24KB - Virtual size: 70KB

.vebum
Size: 1024B - Virtual size: 1024B

.rejoko
Size: 512B - Virtual size: 214B

.rsrc
Size: 47KB - Virtual size: 47KB

.reloc
Size: 5KB - Virtual size: 5KB