27fd39a487fee3d0ce31f608ce7411b8cd8584735652afc466d8fbbb22551063

Sharing

Copy URL

Twitter E-mail

General

Target

27fd39a487fee3d0ce31f608ce7411b8cd8584735652afc466d8fbbb22551063
Size

227KB
MD5

0654152576e21f346910d37946a965e0
SHA1

391a68a861c4d392107a028d0d38be062b97c099
SHA256

27fd39a487fee3d0ce31f608ce7411b8cd8584735652afc466d8fbbb22551063
SHA512

a2a764687e2bd7203002c7d6388eb97247ca6b48e0afa01c6e7a7e76fe08bb8d37917b79bac5544779103099058ed846e71cef199f0a2bca8f93ff4a7d8a988f
SSDEEP

6144:y4hkkd1+ID9n4mgZDdRQ3fR8e6ELL3isW:yGrDl4VZDdR3e3L3hW

Score

N/A

Malware Config

Signatures

Files

27fd39a487fee3d0ce31f608ce7411b8cd8584735652afc466d8fbbb22551063
.exe windows x86

592759ab36dbcefbdd1bfecd80844ec7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetSecurityDescriptorControl
AddUsersToEncryptedFile
OpenThreadToken
SystemFunction016
LsaEnumeratePrivileges
RegCreateKeyExA
RegCloseKey
GetAclInformation
RegSetValueExA
RegOpenKeyExA
LockServiceDatabase
LsaICLookupNamesWithCreds
RegDeleteValueA
MSChapSrvChangePassword

gdi32

GetClipBox
GetRelAbs
CreateEllipticRgn
ExtTextOutA
CreateDIBitmap
SetViewportExtEx
RestoreDC
RoundRect
GetDeviceCaps
TextOutA
SetMapMode
SetWindowExtEx
SelectClipRgn
DeleteObject
DeleteDC

comdlg32

GetFileTitleA

kernel32

WideCharToMultiByte
InterlockedDecrement
SetCurrentDirectoryA
MultiByteToWideChar
GetProcAddress
GlobalHandle
Beep
GetVolumeInformationA
IsBadCodePtr
GlobalAddAtomA
GlobalLock
LocalFileTimeToFileTime
UnlockFile
FlushFileBuffers
GlobalDeleteAtom
GetEnvironmentStringsA
MulDiv
lstrcpyA
GetStdHandle
DosDateTimeToFileTime
VirtualFree
FindClose
GetThreadLocale
GetTimeZoneInformation
GetCurrentThread
SetConsoleTextAttribute
GetWindowsDirectoryA
HeapFree
LoadLibraryA
FileTimeToLocalFileTime
IsBadReadPtr
LeaveCriticalSection
SetConsoleCursorInfo
GetCurrentThreadId
lstrcmpA
ClearCommError
CompareStringA
GetFullPathNameA
RaiseException
InterlockedIncrement
GetCPInfo
SetStdHandle
HeapCreate
SetFilePointer
GetFileSize
GlobalGetAtomNameA
Toolhelp32ReadProcessMemory
FreeLibrary
FindNextFileA
GetFileAttributesA
SystemTimeToTzSpecificLocalTime
GetCommandLineA
FlushInstructionCache
DeleteFileA
SetEndOfFile
FileTimeToSystemTime
SetHandleCount
TlsAlloc
FindResourceA
FreeEnvironmentStringsA
GlobalUnlock
SetSystemTime
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetStartupInfoA
GetVersion
LocalAlloc
HeapReAlloc
RtlUnwind
HeapDestroy
LCMapStringA
LoadResource
GetEnvironmentVariableA
GetACP
lstrcpynA
CloseHandle
DeleteCriticalSection
TlsGetValue
SetFileAttributesA
ReleaseActCtx
GlobalAlloc
LocalReAlloc
lstrcmpiA
VirtualAlloc
GetStringTypeW
GetVersionExA
SetLastError
LocalUnlock
GetFileTime
GlobalFree
IsDebuggerPresent
SetEnvironmentVariableA
SetUnhandledExceptionFilter
ReadFile
IsBadWritePtr
GetStringTypeA
HeapAlloc
GetModuleHandleA
EnterCriticalSection
GetDriveTypeA
LocalFree
LockResource
InitializeCriticalSection
InitializeSListHead
SetErrorMode
GlobalFindAtomA
TlsSetValue
IsValidLocale
CompareStringW
DuplicateHandle
WriteFile
GetOEMCP
GetFileType
ExitProcess
Sleep
GetCurrentDirectoryA
GetModuleFileNameA
GetCurrentProcess
GlobalFlags
lstrcatA
LCMapStringW
GetLastError
SystemTimeToFileTime
GetEnvironmentStringsW
FindFirstFileA
GetSystemDirectoryA
lstrlenA
GetProcessVersion
LockFile
TlsFree
HeapSize
CreateFileA

user32

GetMenuItemCount
GetKeyState
GetWindowTextA
GetDlgCtrlID
UnhookWindowsHookEx
GetDlgItem
EnableWindow
DestroyWindow
SetWindowPos
MessageBoxA
GetParent
WinHelpA
GetWindow
EndDialog
IsWindowEnabled
ShowWindow
UpdateWindow
CallNextHookEx
GetWindowRect
SetMenuItemBitmaps
MapWindowPoints
ValidateRect
LoadBitmapA
GetCursorPos
PeekMessageA
CallWindowProcA
LoadStringA
ClientToScreen
GetMenuItemID
SetWindowTextA
wsprintfA
LoadCursorA
CharUpperA
PostMessageA
DrawIcon
DefWindowProcA
EndPaint
GetClassNameA
GetPropA
GetDC
PtInRect
GetFocus
SendDlgItemMessageA
GetMessagePos
EnableMenuItem
GetWindowTextLengthA
SetActiveWindow
SetWindowsHookExA
PostQuitMessage
SetPropA
RegisterClassA
CreateDialogIndirectParamA
GetActiveWindow
GetMessageA
GetClassInfoA
GetTopWindow
GetLastActivePopup
SendMessageA
RemovePropA
GetSysColorBrush
IsWindow
IsWindowVisible
SystemParametersInfoA
TranslateMessage
SetForegroundWindow
SetWindowLongA
GetWindowPlacement
DestroyMenu
GetSubMenu
ReleaseDC
GetSysColor
GetWindowLongA
ExitWindowsEx
CreateWindowExA
GetCapture
GetMenu
IsDialogMessageA
GetForegroundWindow
GetSystemMetrics
GetMenuCheckMarkDimensions
UnregisterClassA
GetClientRect
CopyRect
GrayStringA
CheckMenuItem
GetMenuState

winmm

timeGetSystemTime
waveOutGetPitch
mixerOpen

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

592759ab36dbcefbdd1bfecd80844ec7

Headers

File Characteristics

Imports

advapi32

gdi32

comdlg32

kernel32

user32

winmm

Sections

.text Size: 200KB - Virtual size: 199KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 200KB - Virtual size: 199KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 1KB - Virtual size: 1KB