27350f7e4e770f09a204bbacfee5750ca78e7ad41c8a5f78eb99ce1f16182e2e

Sharing

Copy URL Twitter E-mail

General

Target

27350f7e4e770f09a204bbacfee5750ca78e7ad41c8a5f78eb99ce1f16182e2e
Size

840KB
MD5

e20b16678edf6bd2a11aeb5974e21ed9
SHA1

33aa875f77bb1cecdd9911859dcbbff173ab6c59
SHA256

27350f7e4e770f09a204bbacfee5750ca78e7ad41c8a5f78eb99ce1f16182e2e
SHA512

bbc6a8ad1948738d973e57f3b775af845dbdc7554270fd6439a02978396e8a7cb1d9a0b7cc4fddbb341137411fd95cb9403204f53d182e8b0b2857f9d84495a1
SSDEEP

24576:9E534ZVex000zCJfjzllKG+C5CUuO/Ze/8k:pjez0ODlfpAUZe

Score

N/A

Malware Config

Signatures

Files

27350f7e4e770f09a204bbacfee5750ca78e7ad41c8a5f78eb99ce1f16182e2e
.exe windows x86

7e71c32c87e7c710ff337cd68373d35a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
GetConsoleMode
DeleteCriticalSection
GetOEMCP
GlobalUnlock
QueryPerformanceCounter
GetVersionExA
LocalFree
DuplicateHandle
GetConsoleCP
HeapDestroy
FileTimeToSystemTime
LocalAlloc
ReadFile
TlsSetValue
SetHandleCount
SetEndOfFile
CompareStringA
InitializeCriticalSection
lstrcmpA
EnterCriticalSection
FlushFileBuffers
GetSystemInfo
GetStringTypeA
SetUnhandledExceptionFilter
UnlockFile
TlsFree
LocalFileTimeToFileTime
VirtualAlloc
GlobalDeleteAtom
SizeofResource
TlsAlloc
GetCommandLineW
RtlUnwind
GetACP
GetLastError
GetProcessHeap
GetStdHandle
TerminateProcess
GetCurrentThreadId
GlobalHandle
GetCommandLineA
GetThreadLocale
FreeLibrary
lstrlenA
Sleep
VirtualFree
LocalReAlloc
HeapFree
GetSystemTimeAsFileTime
GlobalLock
FreeEnvironmentStringsA
SetFilePointer
VirtualQuery
GetFileSize
InterlockedExchange
GetFileType
SetEnvironmentVariableA
LeaveCriticalSection
HeapAlloc
LockFile
GlobalFlags
GetCurrentProcessId
UnhandledExceptionFilter
GetConsoleOutputCP
CloseHandle
SetStdHandle
LoadResource
GetTimeZoneInformation
LCMapStringA
GetModuleHandleA
HeapSize
WriteFile
ConvertDefaultLocale
GlobalReAlloc
GlobalFree
SystemTimeToFileTime
FreeResource
InterlockedDecrement
IsDebuggerPresent
EnumResourceLanguagesW
MulDiv
GetSystemDirectoryA
FileTimeToLocalFileTime
GetWindowsDirectoryA
SetFileTime
CreateFileA
GetModuleFileNameA
HeapCreate
RaiseException
GetLocaleInfoA
FindClose
SetLastError
HeapReAlloc
LoadLibraryA
GetStartupInfoA
GetFileTime
SetErrorMode
InterlockedIncrement
GlobalAlloc
LockResource
GetCurrentThread
GetVersion
VirtualProtect
LoadLibraryExA
AddAtomA
WriteConsoleA
GetProcAddress
SetConsoleCP
FreeConsole
ReadConsoleInputA
GetTickCount
WriteConsoleInputA
AllocConsole
TlsGetValue
ExitProcess

user32

UnhookWindowsHookEx
MapWindowPoints
GetSysColor
AdjustWindowRectEx
GetWindowRect
IsChild
InflateRect
GetFocus
GetScrollInfo
SetCursor
SetScrollRange
DestroyMenu
SetWindowRgn
ReuseDDElParam
EnableMenuItem
IsWindowEnabled
ShowScrollBar
PtInRect
EndDeferWindowPos
IsWindowVisible
TranslateMessage
SetRect
IsIconic
GetNextDlgGroupItem
GetWindowDC
EndPaint
EqualRect
BeginDeferWindowPos
GetSysColorBrush
GetWindowThreadProcessId
GetCapture
SetMenuItemBitmaps
SetWindowContextHelpId
GetMenuState
GetParent
ReleaseDC
GetActiveWindow
ScrollWindow
GetDesktopWindow
CreatePopupMenu
SetMenu
IsZoomed
ScreenToClient
MapDialogRect
PostQuitMessage
GetTopWindow
SetWindowPos
InvalidateRect
IntersectRect
GetSystemMetrics
SetScrollPos
GetCursorPos
GetMessageTime
ReleaseCapture
UpdateWindow
GetMenuItemCount
SetFocus
GetForegroundWindow
GetMenuItemID
GetClientRect
GetKeyState
IsRectEmpty
ShowOwnedPopups
GetScrollPos
GetWindowRgn
ClientToScreen
GetNextDlgTabItem
SystemParametersInfoA
InvalidateRgn
SendDlgItemMessageA
LockWindowUpdate
DrawIcon
GetMenu
GetScrollRange
GetDCEx
SetParent
IsWindow
BeginPaint
DestroyIcon
WindowFromPoint
GetDlgItem
RedrawWindow
MoveWindow
UnpackDDElParam
EndDialog
ShowWindow
CopyRect
GetSubMenu
GetMessagePos
UnregisterClassA
BringWindowToTop
GetWindow
TrackPopupMenu
ValidateRect
CheckMenuItem
GetDC
OffsetRect
GetSystemMenu
SetCapture
CallNextHookEx
SetActiveWindow
SetScrollInfo
GetWindowPlacement
GetMenuCheckMarkDimensions
GetDlgCtrlID
MessageBeep
DeferWindowPos
DestroyWindow
GetLastActivePopup
FillRect
SetTimer
DeleteMenu
SetRectEmpty
KillTimer
SetForegroundWindow

gdi32

GetWindowExtEx
Ellipse
OffsetViewportOrgEx
SelectClipRgn
CombineRgn
DeleteDC
ExtSelectClipRgn
StretchDIBits
CreateRectRgnIndirect
DeleteObject
BitBlt
SetBkColor
SetBkMode
GetMapMode
SelectObject
ExcludeClipRect
CreateEllipticRgn
SaveDC
GetBkColor
ScaleWindowExtEx
Escape
IntersectClipRect
PtVisible
PatBlt
LPtoDP
CreateRectRgn
GetStockObject
GetClipBox
GetPixel
SetMapMode
RectVisible
CreatePatternBrush
GetRgnBox
GetTextColor
SetTextColor
DPtoLP
SetViewportOrgEx
RestoreDC
CreateCompatibleDC
ScaleViewportExtEx
CreateSolidBrush
CreateBitmap
SetWindowExtEx
CreateCompatibleBitmap
GetDeviceCaps
OffsetRgn
SetViewportExtEx
SetRectRgn

advapi32

RegCloseKey
GetFileSecurityW
SetFileSecurityW

shell32

DragAcceptFiles
DragFinish

ole32

StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoCreateInstance
CoGetClassObject
OleInitialize
OleIsCurrentClipboard
CoTaskMemFree
OleFlushClipboard
CLSIDFromString
CoFreeUnusedLibraries
CreateStreamOnHGlobal
OleUninitialize
CoTaskMemAlloc
CoUninitialize
CLSIDFromProgID

oleaut32

VariantCopy
OleLoadPicture
SysAllocStringLen
VariantTimeToSystemTime
OleCreateFontIndirect
SafeArrayDestroy
SysAllocString
SystemTimeToVariantTime
VariantClear
SysStringLen
VariantChangeType
VariantInit
SysFreeString

comctl32

ImageList_LoadImageW

shlwapi

PathFileExistsW
PathFindFileNameW
PathRemoveExtensionW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

userenv

UnloadUserProfile

Sections

.text
Size: 479KB - Virtual size: 479KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 344KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e71c32c87e7c710ff337cd68373d35a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

userenv

Sections

.text Size: 479KB - Virtual size: 479KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 344KB - Virtual size: 362KB

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 479KB - Virtual size: 479KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 344KB - Virtual size: 362KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 3KB - Virtual size: 3KB