27b70da3a74afcd5e82d7f0f5acec72b[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
27b70da3a74afcd5e82d7f0f5acec72b.exe
Size 248KB
Sample220915-n6weaadaa7
SHA256 5596bf3eae94c4e77eee13ea738dba48864d79a6ea7a269cc598b66325ef3f40
MD5 27b70da3a74afcd5e82d7f0f5acec72b
SHA1 ef89fc4941b966487cc4396768a7d5b87828dbe1
SHA512 52fb041dea8e8d313e3602327085bc64d848e4e81b536eef4e8c867bb414c30ef00d0d66136477877b52929ae93eb1689dbe4828bbb0e66620d000bf1a25e5ca
SSDEEP 3072:IXMO0tPGKInveLtFYR755ctw4TIgEToFQ9/AmS+Wex0KmWcydOdM/h3BsxkgaBCY:c+PzaGLtGREwAU0F4/AHWx0pThdniga
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

27b70da3a74afcd5e82d7f0f5acec72b.exe

.exe 248KB

27b70da3a74afcd5e82d7f0f5acec72b.exe

IMPHASH d06384e968096c5cd525d4b22f15b80f
SHA256 5596bf3eae94c4e77eee13ea738dba48864d79a6ea7a269cc598b66325ef3f40
MD5 27b70da3a74afcd5e82d7f0f5acec72b
SHA1 ef89fc4941b966487cc4396768a7d5b87828dbe1
SHA512 52fb041dea8e8d313e3602327085bc64d848e4e81b536eef4e8c867bb414c30ef00d0d66136477877b52929ae93eb1689dbe4828bbb0e66620d000bf1a25e5ca
SSDEEP 3072:IXMO0tPGKInveLtFYR755ctw4TIgEToFQ9/AmS+Wex0KmWcydOdM/h3BsxkgaBCY:c+PzaGLtGREwAU0F4/AHWx0pThdniga
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

26769

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnlockFile InterlockedCompareExchange OpenWaitableTimerA CreateEventA ReadConsoleInputA WaitNamedPipeA CommConfigDialogA GetSystemTimeAdjustment SearchPathW EnumResourceTypesA GetModuleFileNameW UpdateResourceA LoadLibraryW DeleteFileW CopyFileA FillConsoleOutputCharacterA WriteConsoleOutputCharacterW GetConsoleAliasesLengthW PeekConsoleInputA GlobalGetAtomNameA GetShortPathNameW GetPrivateProfileStringA GetProcAddress VirtualAlloc GetConsoleAliasW FindFirstChangeNotificationA WritePrivateProfileStringW EnumResourceNamesA lstrcpynW AddAtomA SetConsoleCtrlHandler GetLongPathNameW GetSystemDefaultLCID GetSystemDefaultLangID GetLastError GlobalAlloc GetComputerNameA FindNextFileA GetPriorityClass OpenJobObjectA InitializeCriticalSection FindResourceExA SetConsoleMode _hwrite GlobalUnfix GetComputerNameW VerifyVersionInfoW SetFileShortNameA GetVolumeNameForVolumeMountPointW GetFileAttributesExW SetComputerNameW GetFileAttributesA ReadConsoleA GetVolumePathNameW FoldStringW GetModuleHandleA ZombifyActCtx LoadLibraryA CreateFileA GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage ReadFile InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind HeapAlloc HeapReAlloc LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

ScreenToClient

gdi32

GetCharWidth32A GetFontLanguageInfo

advapi32

GetOldestEventLogRecord

msimg32

AlphaBlend