27cf668774d84afde2af918ca00ad13a1b10c3fd6dbddf275cb3f2ba745e7ee2

Sharing

Copy URL Twitter E-mail

General

Target

27cf668774d84afde2af918ca00ad13a1b10c3fd6dbddf275cb3f2ba745e7ee2
Size

60KB
MD5

040dae70016acaa55cc05d086dd042f6
SHA1

f704f1d6e5222205987869b170dafc8afe47b387
SHA256

27cf668774d84afde2af918ca00ad13a1b10c3fd6dbddf275cb3f2ba745e7ee2
SHA512

3e72c66b0fa7723f8c18ffe3446c7a47193878ce56b0b936308ae9436f39bb69c55d6f6fb1dcbce2fbfa9f722f91a23a30e6da7684ab733f8ed116177301395c
SSDEEP

768:mqDntdYWdqWuZaRn9INVvhDx8nhajrOKP02ouZoIcjgmd+qRvkxgBl+xaTISBn:d/YoqWugR9IjvhDE+Jst5FOgBjpt

Score

N/A

Malware Config

Signatures

Files

27cf668774d84afde2af918ca00ad13a1b10c3fd6dbddf275cb3f2ba745e7ee2
.exe windows x86

694efdcf1434cbffce5156475ec4cfe4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
__dllonexit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_beginthreadex
printf
_access
sprintf
strstr
_except_handler3
free
realloc
malloc
??2@YAPAXI@Z
_ftol
memmove
??3@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler

kernel32

GetStartupInfoA
CopyFileA
SetFileAttributesA
GetCurrentThreadId
ExpandEnvironmentStringsA
WinExec
CreateThread
OpenEventA
GetLocalTime
InitializeCriticalSection
Sleep
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
CreateEventA
CloseHandle
WaitForSingleObject
ResetEvent
lstrcpyA
SetEvent
InterlockedExchange
CancelIo
WriteFile
SetFilePointer
CreateFileA
GetFileSize
GetWindowsDirectoryA
ReadFile
GetFileAttributesA
CreateProcessA
lstrlenA
TerminateThread
lstrcatA
GetTickCount
GetLastError
GetCurrentProcess
HeapAlloc
GetProcessHeap
VirtualProtect
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
GetModuleHandleA
GetDiskFreeSpaceExA
GetDriveTypeA
GlobalMemoryStatusEx
CreateDirectoryA
GetVersionExA
FindClose
FindFirstFileA
GetModuleFileNameA
ExitProcess
DeleteFileA
DuplicateHandle
OpenProcess
GetSystemInfo

user32

GetUserObjectInformationA
SetThreadDesktop
CloseDesktop
LoadIconA
LoadCursorA
GetThreadDesktop
PostThreadMessageA
GetInputState
GetMessageA
ExitWindowsEx
wsprintfA
RegisterClassA

gdi32

GetStockObject

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
CreateServiceA
LockServiceDatabase
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyA
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
CloseServiceHandle
StartServiceA
OpenServiceA
ChangeServiceConfig2A

shell32

ShellExecuteA

ws2_32

WSAStartup
WSACleanup
WSAIoctl
setsockopt
connect
htons
gethostbyname
socket
ntohs
recv
closesocket
select
send
gethostname
getsockname

Sections

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

694efdcf1434cbffce5156475ec4cfe4

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

advapi32

shell32

ws2_32

Sections

.bss Size: - Virtual size: 2KB

.data Size: 48KB - Virtual size: 48KB

.idata Size: 5KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 2KB

.data
Size: 48KB - Virtual size: 48KB

.idata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 3KB