27af187483d0f2d33a33428706f8a4b5f39093ff0abb206deb66fc512ce94602

Sharing

Copy URL Twitter E-mail

General

Target

27af187483d0f2d33a33428706f8a4b5f39093ff0abb206deb66fc512ce94602
Size

55KB
MD5

29ef2c509f0d0ad8e7853b4132749346
SHA1

1862cc23b9920ac3006934d08a4c83c4c6274bd8
SHA256

27af187483d0f2d33a33428706f8a4b5f39093ff0abb206deb66fc512ce94602
SHA512

d0e14cfa6d2e7f495bf08b8e5a84b0a87354410cd005f77f62622ae086509e5cc5516e76a0a253143ab2d14680a121e1894ea85e8b83c4644d17cf96f712a5f6
SSDEEP

1536:LqgvmCW0QxVgKb2nsAX1MXWLb+QlzCicqZXyezq:TvmCgZ2sAFMXC3zrcqo6

Score

N/A

Malware Config

Signatures

Files

27af187483d0f2d33a33428706f8a4b5f39093ff0abb206deb66fc512ce94602
.exe windows x86

4b710683a0bb44b442d180ebdd1f1172

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
GetUserNameA
CopySid
GetLengthSid
RegCreateKeyA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA

msimg32

AlphaBlend
GradientFill
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend
AlphaBlend

comdlg32

ChooseColorA
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA

user32

CreateWindowExW
CreateWindowExA
keybd_event
WindowFromPoint
WindowFromDC
WinHelpA
WaitMessage
VkKeyScanW
ValidateRect
UpdateLayeredWindow
UpdateWindow
UnregisterHotKey
UnregisterDeviceNotification
UnregisterClassW
UnregisterClassA
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenuEx
TrackPopupMenu
TrackMouseEvent
ToUnicode
ToAscii
SystemParametersInfoW
SystemParametersInfoA
SubtractRect
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
ShowCaret
SetWindowRgn
SetWindowsHookExW
SetWindowsHookExA
SetWindowTextW
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect

crypt32

CryptMemRealloc
CryptMsgCalculateEncodedLength
CryptMsgClose
CryptMsgControl
CryptMsgCountersign

ntdll

CsrAllocateCaptureBuffer
CsrAllocateMessagePointer
CsrCaptureMessageBuffer

msi

MsiPreviewDialogA

winmm

PlaySoundA

kernel32

SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
SetEndOfFile
InterlockedExchange
RtlUnwind
SetFilePointer
SetStdHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
SetEndOfFile
InterlockedExchange
RtlUnwind
SetFilePointer
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetTimeZoneInformation
FlushFileBuffers
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
DeleteFileA
TerminateProcess
ExitProcess
HeapFree
HeapReAlloc
HeapAlloc
GetDateFormatA
GetTimeFormatA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetACP
GetLocalTime
GetEnvironmentVariableA
SetCommBreak
_lopen
GetCommState
SetCommState
SetCommTimeouts
ClearCommBreak
CreatePipe
SetHandleInformation
GetCurrentThreadId
OpenProcess
LocalAlloc
LocalFree
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcessId
QueryPerformanceCounter
GlobalMemoryStatus
GetCurrentThread
GetThreadTimes
GetCurrentProcess
GetProcessTimes
GetSystemTime
GetSystemTimeAdjustment
GetSystemDirectoryA
WriteFile
CreateEventA
_lread
GetLastError
WaitForSingleObject
GetOverlappedResult
SetEvent
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 474B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b710683a0bb44b442d180ebdd1f1172

Headers

File Characteristics

Imports

advapi32

msimg32

comdlg32

user32

crypt32

ntdll

msi

winmm

kernel32

Sections

.text Size: 512B - Virtual size: 474B

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 44KB - Virtual size: 44KB

.DATA Size: 512B - Virtual size: 20KB

.text
Size: 512B - Virtual size: 474B

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 44KB - Virtual size: 44KB

.DATA
Size: 512B - Virtual size: 20KB