f27db2beb9c9de40d30c4cfaa0181228fedc23299cfffbc4e9836a74fa8e34bd

Sharing

Copy URL Twitter E-mail

General

Target

f27db2beb9c9de40d30c4cfaa0181228fedc23299cfffbc4e9836a74fa8e34bd
Size

427KB
MD5

aa1eeeeff58b94365fdfd74c6e73aaff
SHA1

609760f2b9e41be59e0ed6c3a31cc4a4cf2be75d
SHA256

f27db2beb9c9de40d30c4cfaa0181228fedc23299cfffbc4e9836a74fa8e34bd
SHA512

907137ae6d4fa57bdb4d97257aeffb39b47c959cd9881229c227d3f9c630e17c32bf1dab7d8f20932abc178cfab4cd938626a887e929343746d2053305379f5e
SSDEEP

12288:/2fZOlUV1glMKTKK4KKDyK5FZ1EEEEmEEE1EEEEEEEEEEElKK1KKK1KKK:/2clUvg2KTKK4KKDyK5FZ1EEEEmEEE1S

Score

1^/10

Malware Config

Signatures

Files

f27db2beb9c9de40d30c4cfaa0181228fedc23299cfffbc4e9836a74fa8e34bd
.exe windows x86

5be698cb92180fd45dcc7bf759475c3e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
SizeofResource
FindResourceW
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringW
CreateMutexW
GetVersionExW
LocalAlloc
LoadResource
LocalFree
lstrcmpA
GetConsoleMode
GetConsoleOutputCP
FindResourceExW
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
FlushFileBuffers
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapAlloc
HeapDestroy
GetLastError
RaiseException
CloseHandle
DecodePointer
CreateFileW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
WriteConsoleW

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

CommandLineToArgvW
ShellExecuteExW

crypt32

CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptDecodeObject
CryptMsgClose
CryptQueryObject

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5be698cb92180fd45dcc7bf759475c3e

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

crypt32

Sections

.text Size: 84KB - Virtual size: 83KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 301KB - Virtual size: 301KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 84KB - Virtual size: 83KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 301KB - Virtual size: 301KB

.reloc
Size: 5KB - Virtual size: 5KB