b27ae67c72e87c01efc4951e6acd2c533ab61d441fe94b251dd34b141ee33757

Sharing

Copy URL Twitter E-mail

General

Target

b27ae67c72e87c01efc4951e6acd2c533ab61d441fe94b251dd34b141ee33757
Size

162KB
MD5

93590b4793231f921b9212ddb472f924
SHA1

4358b869be4f2da6aecd4ab8834462a67ee68317
SHA256

b27ae67c72e87c01efc4951e6acd2c533ab61d441fe94b251dd34b141ee33757
SHA512

9c1ba42efdd7788553cef4b9c79c53e36bbc2a2d1237643f12e1eb364f40fc1e9ecdeeebada65f88b83189ddf8d3602d1b16b961ff84dc3773e3af21c25107ef
SSDEEP

1536:md08pKA7VfMX6GtuvezcngDkY02WUvH1h8nW/+3ZDoioifEowyXW65ZgU:EJj+U8cpJ2gWKZdoxe5ZgU

Score

N/A

Malware Config

Signatures

Files

b27ae67c72e87c01efc4951e6acd2c533ab61d441fe94b251dd34b141ee33757
.exe windows x86

bd2f580f5ff3076a5561cd1c8ad4feec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

kernel32

CreateToolhelp32Snapshot
CloseHandle
ExitProcess
SetPriorityClass
MoveFileExA
GetCurrentProcess
GetCurrentThread
SetProcessPriorityBoost
GetFileAttributesA
GetEnvironmentVariableA
SetThreadPriority
GetShortPathNameA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetVersionExA
GetLastError
CreateMutexA
ReleaseMutex
GetCurrentProcessId
FreeLibrary
GetModuleFileNameA
WaitForSingleObject
GetTickCount
CreateEventA
MultiByteToWideChar
CreateThread
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoA
HeapSize
Process32Next
Sleep
Process32First
GetComputerNameA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
WinExec
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetFileType
SetHandleCount
FlushFileBuffers
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW

user32

IsWindow
SwitchToThisWindow
RealGetWindowClassA
VkKeyScanW
SendInput
MapVirtualKeyA
PostMessageA
BlockInput
keybd_event
FindWindowExA
SendMessageA
GetForegroundWindow
GetWindowTextA
FindWindowA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
FreeSid
AllocateAndInitializeSid
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
IsTextUnicode

shell32

ShellExecuteExA
ShellExecuteA
SHChangeNotify

ntdll

ZwSystemDebugControl
NtQuerySystemInformation

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ttujris
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bd2f580f5ff3076a5561cd1c8ad4feec

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

advapi32

shell32

ntdll

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 5KB - Virtual size: 12KB

.reloc Size: 36KB - Virtual size: 37KB

ttujris Size: - Virtual size: 4KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 5KB - Virtual size: 12KB

.reloc
Size: 36KB - Virtual size: 37KB

ttujris
Size: - Virtual size: 4KB