27c4a34fd16bb42f0b4090abab4d18237fc654d7e54e5f83677051ccb24abdae

Sharing

Copy URL Twitter E-mail

General

Target

27c4a34fd16bb42f0b4090abab4d18237fc654d7e54e5f83677051ccb24abdae
Size

216KB
MD5

20be9c4fead479ffaa49d32b49bab832
SHA1

c6e86cf17c6a7beb8a8c1ab6ea666eb8a8ffb16b
SHA256

27c4a34fd16bb42f0b4090abab4d18237fc654d7e54e5f83677051ccb24abdae
SHA512

05f596e4b291e6a0bd58c4e6fd597bf060897d1f7568c714dda4ad891e71519518e66a41f71c9596a6e59e8b7d41cdf46d189a42c161bb527f5296df775a6315
SSDEEP

3072:nwf0JXVvsbotwDat21SknMMo5y2gk5oQJLpX2+FoLzMhFnH9PZz2fo:nOudCat2SkMTvFLEohFH9PZzd

Score

N/A

Malware Config

Signatures

Files

27c4a34fd16bb42f0b4090abab4d18237fc654d7e54e5f83677051ccb24abdae
.exe windows x86

04b4ddfc7d49be0a82edd16a14b86d9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalReAlloc
CloseHandle
GlobalAlloc
GlobalLock
GlobalReAlloc
GlobalDeleteAtom
lstrcpyA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
FreeLibrary
GetProcessVersion
GlobalFindAtomA
lstrcmpA
GlobalFlags
GlobalFree
GlobalAddAtomA
GlobalHandle
GetCurrentProcess
SetFilePointer
FlushFileBuffers
GlobalUnlock
LocalAlloc
lstrcpynA
InterlockedDecrement
LocalFree
lstrlenA
GetProcAddress
LoadLibraryA
VirtualAlloc
IsBadWritePtr
HeapReAlloc
LCMapStringW
GetStringTypeW
GetStringTypeA
HeapAlloc
LCMapStringA
MultiByteToWideChar
HeapFree
WriteFile
RtlUnwind
HeapDestroy
VirtualFree
HeapCreate
TlsGetValue
GetLastError
TlsAlloc
SetLastError
GetFileType
TlsSetValue
GetCurrentThreadId
GetEnvironmentStringsW
GetStdHandle
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetModuleFileNameA
TerminateProcess
GetVersionExA
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
Sleep
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
HeapSize
RaiseException
SetStdHandle

user32

LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
GetClientRect
GetPropA
GetSysColor
MapWindowPoints
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
DispatchMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
SendMessageA
MessageBoxA
EnableWindow
UnhookWindowsHookEx
LoadStringA
FindWindowExA
SetFocus
AdjustWindowRectEx
GetWindowLongA
GetDesktopWindow
GetWindow
GetClassNameA
PostMessageA
CallWindowProcA
RemovePropA
CopyRect
GetTopWindow
CreateWindowExA
GetClassLongA
GetMessageTime
SetPropA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

comctl32

ord17

gdi32

Escape
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
RectVisible
TextOutA
PtVisible
OffsetViewportOrgEx
ExtTextOutA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qshgfhd
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.drdata
Size: 68KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xlfmbri
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nzpisjz
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

04b4ddfc7d49be0a82edd16a14b86d9b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

comctl32

gdi32

winspool.drv

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 84KB - Virtual size: 84KB

qshgfhd Size: - Virtual size: 4KB

.drdata Size: 68KB - Virtual size: 96KB

xlfmbri Size: - Virtual size: 32KB

nzpisjz Size: - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 84KB - Virtual size: 84KB

qshgfhd
Size: - Virtual size: 4KB

.drdata
Size: 68KB - Virtual size: 96KB

xlfmbri
Size: - Virtual size: 32KB

nzpisjz
Size: - Virtual size: 4KB