27df97f06dd842d961423ff4b62c501fe8db25832bc293c34c234589a99f65b9

Sharing

Copy URL Twitter E-mail

General

Target

27df97f06dd842d961423ff4b62c501fe8db25832bc293c34c234589a99f65b9
Size

139KB
MD5

872facacfe6878d7e33f766a4a261cc5
SHA1

a75df6e6d08fe1f8ea847c83809342f395d45cdd
SHA256

27df97f06dd842d961423ff4b62c501fe8db25832bc293c34c234589a99f65b9
SHA512

41d8a18a7e25baf950c2e54ac980f31c8df3bd3a82b4fc675bdbca844302d46e53ae7f62cefc696c904897ce3789c423178b5657b2f6f97cb50f56947c92ffa7
SSDEEP

3072:G6u2yUcPQJGqBcsKHT3mBXpOA8JRy4vtoogjC/Bu/cn:oZIJGqqWx6vtoljCZB

Score

N/A

Malware Config

Signatures

Files

27df97f06dd842d961423ff4b62c501fe8db25832bc293c34c234589a99f65b9
.zip
CORE.nfo
FILE_ID.DIZ
Portable.Avs.Dvd.Authoring.1.3.keymaker.by.CORE.exe
.exe windows x86

a6270b2f92cb06f6d9168502c07a0776

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathUndecorateA
ChrCmpIA
StrPBrkA
PathCombineW
StrFormatKBSizeA

shell32

ord716

kernel32

SetMessageWaitingIndicator
VerifyVersionInfoW
GetCommMask
CancelTimerQueueTimer
GetCommandLineA
CloseHandle
TlsFree
UnlockFile
FileTimeToDosDateTime
DefineDosDeviceW
BackupWrite
LoadLibraryExW
CreateFiber
lstrcpyA
OpenMutexA
LoadLibraryA
GetNamedPipeInfo
OpenSemaphoreA
WriteProfileStringW

user32

UnloadKeyboardLayout
CheckMenuItem
GetPropW
LoadCursorA
ReleaseCapture
GetCursor
WindowFromDC
IsCharLowerW
CheckDlgButton
DlgDirSelectComboBoxExW
EndDialog
SetScrollPos
ChangeDisplaySettingsExA
GetDC
CreateIconIndirect
GetMenuCheckMarkDimensions
DrawTextExW
TrackPopupMenu
DestroyAcceleratorTable
GetClassNameA
TranslateAcceleratorW
SetWindowPlacement
GetWindowTextLengthW
LoadMenuIndirectA
WaitForInputIdle
GetTabbedTextExtentW
wsprintfW
SetSysColors
PeekMessageW
DrawStateW
GetRawInputDeviceInfoA
RedrawWindow
GetMenuStringA
GetMenuContextHelpId
ClipCursor
DispatchMessageA
GetSystemMetrics
SetCaretPos
SendMessageW
GetMessageTime
GetWindow
RemovePropA

gdi32

SetPixelFormat
GetCurrentPositionEx
CreateBrushIndirect
SetBitmapDimensionEx
CreatePolygonRgn
GetCharWidthFloatW
GetTextExtentPoint32A
GetPixelFormat
BitBlt
GetEnhMetaFileBits
EndPath
SetTextJustification
AddFontResourceExA
RoundRect

advapi32

FindFirstFreeAce
AreAnyAccessesGranted
AddAccessAllowedAceEx
CloseEventLog

Exports

Exports

__GetWindowTextA@12

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.exdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.memo0
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c_mem
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.datse
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 950B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6270b2f92cb06f6d9168502c07a0776

Headers

File Characteristics

Imports

shlwapi

shell32

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 9KB

.exdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 388B

.memo0 Size: 512B - Virtual size: 92B

.c_mem Size: 512B - Virtual size: 68B

.datse Size: 4KB - Virtual size: 3KB

.rsrc Size: 127KB - Virtual size: 127KB

.reloc Size: 1024B - Virtual size: 950B

.text
Size: 10KB - Virtual size: 9KB

.exdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 388B

.memo0
Size: 512B - Virtual size: 92B

.c_mem
Size: 512B - Virtual size: 68B

.datse
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 127KB - Virtual size: 127KB

.reloc
Size: 1024B - Virtual size: 950B