27bd8209421ce97c4f83673534303c54877440ce

Sharing

Copy URL

Twitter E-mail

General

Target

27bd8209421ce97c4f83673534303c54877440ce
Size

280KB
MD5

74830b1a27f0df601dda80855af0e3d8
SHA1

27bd8209421ce97c4f83673534303c54877440ce
SHA256

5f9819c1bf86e0e9ab6984a8c25c870ad3159dc01f9f324e9f884ab9c7d680ab
SHA512

15068265119d3329ed6e3b559d85db60b168b1ff03863b77772726d726357d82bf6e002d46347d00004525b4375836042e6a23c21d3c8dbb53511a6a9a1f8a52
SSDEEP

6144:vuRacwYFZyJ8h8nf516bEt5FysncYfwYHGKEg2tfjLofli9O/:v/8Hy6h8f516bE3wm5brELlLmEO/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/16b2742f82cd13b78822873aa06d028707f33fae6d27f2767c74ad2a88428385

Files

27bd8209421ce97c4f83673534303c54877440ce
.zip
16b2742f82cd13b78822873aa06d028707f33fae6d27f2767c74ad2a88428385
.exe windows:5 windows x86 arch:x86

0780a1f529c5eede8a87f1dd92af2170

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\kalelajir90-hejenudotofut_hutopica wopavubasi76\sutela pomeb.pdb

Imports

kernel32

GetConsoleAliasesLengthW
WriteConsoleOutputCharacterA
SetMailslotInfo
LocalFlags
GetConsoleTitleA
LoadLibraryW
InterlockedPopEntrySList
LeaveCriticalSection
WriteConsoleW
GetModuleFileNameW
lstrlenW
GetShortPathNameA
CreateDirectoryA
GetConsoleAliasesW
GetStdHandle
GetCPInfoExW
GetLastError
UnregisterWait
WriteProfileSectionA
LoadLibraryA
LocalAlloc
SetCalendarInfoW
MoveFileA
SetProcessWorkingSetSize
SetConsoleWindowInfo
GetModuleFileNameA
GetModuleHandleA
FindFirstChangeNotificationA
FreeEnvironmentStringsW
VirtualProtect
GetFileAttributesExW
FillConsoleOutputCharacterA
HeapSize
GetCommandLineW
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
CloseHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
HeapReAlloc
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetFilePointer
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
LCMapStringW
GetStringTypeW
CreateFileW

winhttp

WinHttpCloseHandle

Sections

.text
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0780a1f529c5eede8a87f1dd92af2170

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

winhttp

Sections

.text Size: 273KB - Virtual size: 273KB

.data Size: 32KB - Virtual size: 295KB

.rsrc Size: 120KB - Virtual size: 120KB

.text
Size: 273KB - Virtual size: 273KB

.data
Size: 32KB - Virtual size: 295KB

.rsrc
Size: 120KB - Virtual size: 120KB