4c5308f0b254e406fdab95b7767d04301ee162fc82972f7e9c54f909e014f6a3

Sharing

Copy URL Twitter E-mail

General

Target

4c5308f0b254e406fdab95b7767d04301ee162fc82972f7e9c54f909e014f6a3
Size

237KB
MD5

4d518142d1a32c634b3a039f71d99d58
SHA1

444a07093e198ce213c29a178ca0f976fd3a14d4
SHA256

4c5308f0b254e406fdab95b7767d04301ee162fc82972f7e9c54f909e014f6a3
SHA512

e2f032f2b2433daf0b8faf7c10b5c812acad1b4e4cf5a60cd43789d717232d71f06e77533aa11aa95a05d2859887b7efa4f805c4b87b4ec4f5d6cdc9fe1523c5
SSDEEP

6144:eP1isnnDYzq/FrbLvU1H2MtJrr3tx1RDJRRL/ox2/jBZsa6uX6EUDgyCSWC1zjL0:stDYz43c7T7gxzTEh

Score

N/A

Malware Config

Signatures

Files

4c5308f0b254e406fdab95b7767d04301ee162fc82972f7e9c54f909e014f6a3
.exe windows x86

3a653160df3fa53c1aab448da8fcc91f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

wintrust

WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WinVerifyTrust

crypt32

CertGetNameStringW

kernel32

QueryPerformanceCounter
TerminateProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetCommandLineW
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
SetEvent
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LocalFree
LoadLibraryA
LoadLibraryW
FreeLibrary
OutputDebugStringW
CloseHandle
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
IsDebuggerPresent

user32

PostThreadMessageW

shell32

CommandLineToArgvW

ole32

CoReleaseServerProcess
CoCreateInstance
CoInitialize
CoUninitialize
CoAddRefServerProcess

shlwapi

PathAppendW

msvcp140

?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z

vcruntime140

__vcrt_InitializeCriticalSectionEx
_except_handler4_common
memcpy
__std_exception_destroy
__CxxFrameHandler3
_CxxThrowException
strstr
memmove
__std_exception_copy
__std_terminate
memset

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_initialize_wide_environment
_c_exit
_register_thread_local_exe_atexit_callback
_configure_wide_argv
_seh_filter_exe
_cexit
_controlfp_s
_set_app_type
_crt_atexit
terminate
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc
_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3a653160df3fa53c1aab448da8fcc91f

Headers

DLL Characteristics

File Characteristics

Imports

wintrust

crypt32

kernel32

user32

shell32

ole32

shlwapi

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.tls Size: 512B - Virtual size: 9B

.gfids Size: 512B - Virtual size: 88B

.rsrc Size: 130KB - Virtual size: 130KB

.reloc Size: 73KB - Virtual size: 76KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 9B

.gfids
Size: 512B - Virtual size: 88B

.rsrc
Size: 130KB - Virtual size: 130KB

.reloc
Size: 73KB - Virtual size: 76KB