c727a53174e1b4546c36c0d8fa42e7754744227f5130a37007f41f42cb20d0f0

Sharing

Copy URL Twitter E-mail

General

Target

c727a53174e1b4546c36c0d8fa42e7754744227f5130a37007f41f42cb20d0f0
Size

573KB
MD5

5837df370c744e54acf1755a44d83083
SHA1

ad5065f1c869678d13f0ce90fcac496b24148161
SHA256

c727a53174e1b4546c36c0d8fa42e7754744227f5130a37007f41f42cb20d0f0
SHA512

94bef003e1ec97eda7fcad563c3e244b117a36a5042dc045cc83374751eb12adc2aa357961111d0337b1e7f531d86ff4de95ba534cbcfcdefb4a2595d764d3d7
SSDEEP

12288:K9UTuQsC/4SitZd91Zim6ftg5quEGE8VaOrfZrBZD+WeZdjQTet:GUTwCPitZdZoVg5ZjZFZD+WGdjQ

Score

N/A

Malware Config

Signatures

Files

c727a53174e1b4546c36c0d8fa42e7754744227f5130a37007f41f42cb20d0f0
.exe windows x86

f9fcc81626febf9189c63399d737523a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EqualRect
FillRect
IsCharLowerA
LoadAcceleratorsA
LoadBitmapA
LoadCursorFromFileA
LoadImageA
MessageBeep
OemToCharBuffA
PostMessageA
SendMessageA
UpdateWindow
EmptyClipboard
EndDialog

version

GetFileVersionInfoW
VerFindFileW
VerInstallFileW
VerQueryValueW
GetFileVersionInfoA

kernel32

WinExec
VerLanguageNameW
VerLanguageNameA
UnlockFileEx
TerminateProcess
SetLastError
SetFilePointer
SetCurrentDirectoryA
SetCommState
SetCommMask
SetCommBreak
SearchPathA
ReplaceFileA
QueryPerformanceFrequency
DeleteFileA
DuplicateHandle
EnumDateFormatsW
EnumResourceLanguagesW
ExitProcess
FindFirstFileExA
FindFirstVolumeW
FindResourceW
FlushFileBuffers
GetCommandLineA
GetCurrentThreadId
GetDefaultCommConfigW
GetFileSize
GetLastError
GetLocalTime
GetProcAddress
GetTapePosition
GetThreadLocale
GetTickCount
GetVersionExW
HeapAlloc
IsBadReadPtr
IsBadStringPtrA
IsDBCSLeadByte
ProcessIdToSessionId

ntdll

RtlUpcaseUnicodeStringToOemString
RtlxOemStringToUnicodeSize
ZwAccessCheck
ZwCompleteConnectPort
ZwCreateIoCompletion
RtlTimeToElapsedTimeFields
RtlStringFromGUID
RtlSetInformationAcl
RtlSetCurrentDirectory_U
RtlResetRtlTranslations
RtlNtStatusToDosError
RtlMultiByteToUnicodeN
RtlLargeIntegerShiftLeft
RtlIsNameLegalDOS8Dot3
RtlInsertElementGenericTable
RtlInitAnsiString
RtlImpersonateSelf
RtlEqualDomainName
RtlDelete
RtlCreateUserProcess
NtGetWriteWatch
NtMapUserPhysicalPagesScatter
NtPowerInformation
NtPrivilegeObjectAuditAlarm
NtQueryPerformanceCounter
NtSetHighEventPair
RtlTraceDatabaseFind

userenv

CreateEnvironmentBlock
RegisterGPNotification
GetAppliedGPOListW
FreeGPOListW
ExpandEnvironmentStringsForUserW
EnterCriticalPolicySection

Exports

Exports

ImnkQzsZ
NagdYe
Olbiuw
UyxsmsdbAyTbBw
audaknajl
bhcyYckPkvtxrisewul
enuiWtniyeuscidJvwb
ezosyqirXhswcMtwgb
ftmjBpltpcAYunck
hiJxh
lqaybflInvvlIoi
nmthKlfLxpXIabxf
qAlchjufoHpeeF
qbtjsjqveQsNnEglyhr
qsjmpHtzidaer
sBbqeviiBaan
vvvEjtwioudjzltwlop
vzdNpcswce

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 463KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9fcc81626febf9189c63399d737523a

Headers

File Characteristics

Imports

user32

version

kernel32

ntdll

userenv

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 56KB

.data Size: 463KB - Virtual size: 463KB

.rsrc Size: 51KB - Virtual size: 51KB

.text
Size: 57KB - Virtual size: 56KB

.data
Size: 463KB - Virtual size: 463KB

.rsrc
Size: 51KB - Virtual size: 51KB