27c5f019269f04e2f7fdd47db38094ca06be33257f0a47765f950b7ec8617d40

Sharing

Copy URL Twitter E-mail

General

Target

27c5f019269f04e2f7fdd47db38094ca06be33257f0a47765f950b7ec8617d40
Size

284KB
MD5

724fdbd87c4a0a4371df16e07f429240
SHA1

be6133e06b87dbe7033f916d4cd1ec46414cfae6
SHA256

27c5f019269f04e2f7fdd47db38094ca06be33257f0a47765f950b7ec8617d40
SHA512

22e077d51c704f91b65b9fe4c36a587ab205e6157b5a3e2bbcec6e8e6b2de7fc03717fe41cf921412b89cc31f491cbfec73a1fdaf080d9f9e44fc2468cf439bd
SSDEEP

6144:OcJtO61uXuay3FfcveSqjtsgPxLKNvT0VpTjAGdmzBVkvsEkmJGqxmygIqnBvfGz:NJtO61u+poctFLKBT0fwGvdksGqxKSz3

Score

N/A

Malware Config

Signatures

Files

27c5f019269f04e2f7fdd47db38094ca06be33257f0a47765f950b7ec8617d40
.exe windows x86

92b0f1b5b4d8f6d7891c110ece44af08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
FreeEnvironmentStringsW
ReplaceFileW
WritePrivateProfileStringW
FindFirstFileExW
SetConsoleWindowInfo
GlobalAlloc
GetVersionExA
GetStartupInfoW
WriteConsoleA
LoadLibraryW
GetOverlappedResult
CreateTimerQueue
ReadConsoleW
ReadConsoleOutputW
NlsGetCacheUpdateCount
HeapQueryInformation
lstrcpynA
EnumResourceNamesW
ReadConsoleInputExW
GetComputerNameExA
SetClientTimeZoneInformation
GetVolumePathNameA
ReadConsoleInputW
BuildCommDCBA
GetCalendarInfoA
ReadConsoleInputExA
SetTimerQueueTimer
EnumDateFormatsA
SetCommBreak
HeapReAlloc
FindNextVolumeMountPointW
RegisterWowExec
ContinueDebugEvent
GetConsoleScreenBufferInfo
GetModuleHandleW
GlobalCompact
ScrollConsoleScreenBufferW
FlushInstructionCache
GetVolumeInformationW

linkinfo

CompareLinkInfoReferents
CompareLinkInfoVolumes
IsValidLinkInfo
GetCanonicalPathInfoA
GetLinkInfoData
GetCanonicalPathInfo
CreateLinkInfo
CreateLinkInfoW
ResolveLinkInfo
CreateLinkInfoA
ResolveLinkInfoW
ResolveLinkInfoA
DestroyLinkInfo
GetCanonicalPathInfoW
DisconnectLinkInfo

crtdll

_ismbcl1
_vsnwprintf
_spawnl
_clearfp
iswcntrl
tan
_strerror
_flsbuf
_lfind
vfwprintf
iswalpha
_CIasin

certcli

CAGetCAFlags
CARemoveCACertificateType
CAGetCACertificate
CAOIDCreateNew
CAGetCertTypePropertyEx
CAIsCertTypeCurrent
CAOIDFreeLdapURL
CAGetCASecurity
CASetCACertificate
CAAccessCheckEx
CAGetCAExpiration

clusapi

ClusterNodeControl
SetClusterQuorumResource
MoveClusterGroup
CreateClusterResourceType
RemoveClusterResourceNode
ClusterResourceCloseEnum
ClusterResourceTypeOpenEnum
ClusterCloseEnum
GetClusterNodeId
DeleteClusterResource
ClusterRegQueryInfoKey
SetClusterNetworkPriorityOrder
GetClusterNetworkId
CreateClusterGroup
OpenClusterNode
ClusterNetworkOpenEnum
AddClusterResourceDependency
RestoreClusterDatabase

Sections

.text
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92b0f1b5b4d8f6d7891c110ece44af08

Headers

File Characteristics

Imports

kernel32

linkinfo

crtdll

certcli

clusapi

Sections

.text Size: 178KB - Virtual size: 177KB

.rdata Size: 29KB - Virtual size: 29KB

.data Size: 73KB - Virtual size: 72KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 178KB - Virtual size: 177KB

.rdata
Size: 29KB - Virtual size: 29KB

.data
Size: 73KB - Virtual size: 72KB

.rsrc
Size: 1KB - Virtual size: 1KB