a21afe4873dc9e195e493042f8c2b5eb62b5dbb80449abf47769acd11ec344a3

Sharing

Copy URL Twitter E-mail

General

Target

a21afe4873dc9e195e493042f8c2b5eb62b5dbb80449abf47769acd11ec344a3
Size

159KB
MD5

6745994c474374a48750a241008fb9e6
SHA1

161fe08d9889f03261fcc161fa9ce16204671b61
SHA256

a21afe4873dc9e195e493042f8c2b5eb62b5dbb80449abf47769acd11ec344a3
SHA512

a2a256d4314b781b0d4bfe3c9a54cfa80d53838009b90fc038daedc8eb53bf8d39dc07926dae65326a783a4110e3edde5f5bbbed20aae2d36bee80820127d069
SSDEEP

3072:Wa93B0Ob7vMESAzhtykEUo6eg2DBZcHvT89P5DxDj3Bz1FaQ8s4Dhwyuj:WaoC7Ukht1EUo6eFF6Hw5D1ZeQ8sW6Jj

Score

N/A

Malware Config

Signatures

Files

a21afe4873dc9e195e493042f8c2b5eb62b5dbb80449abf47769acd11ec344a3
.exe windows x86

9bd96022e712b80f03324c2fe1217f76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
VirtualFree
InterlockedIncrement
CloseHandle
LoadLibraryW
CreateToolhelp32Snapshot
DeleteCriticalSection
LocalAlloc
GetSystemDirectoryW
GetVersionExA
GetSystemInfo
EnterCriticalSection
GetVolumeInformationA
ReleaseMutex
LeaveCriticalSection
RaiseException
DeleteFileW
GetProcAddress
InitializeCriticalSectionAndSpinCount
FreeLibrary
LoadLibraryExA
GetSystemTime
GetVersion
SetLastError
lstrlenA
DelayLoadFailureHook
InterlockedDecrement
GetDriveTypeA
CreateFileW
InterlockedExchange
GetSystemWindowsDirectoryW
SetUnhandledExceptionFilter
GetLogicalDriveStringsA
HeapSetInformation
GetLastError
GetSystemTimeAsFileTime
GetCurrentProcess
LocalFree
QueryPerformanceCounter
CreateMutexA
DeviceIoControl
Module32NextW
GetTickCount
WaitForSingleObject
Module32FirstW
GetCurrentProcessId

msvcrt

_wcsicmp
_amsg_exit
_XcptFilter
_stricmp
_purecall
_callnewh
__set_app_type
memcpy
_exit
_initterm
_cexit
__setusermatherr
__p__commode
__getmainargs
_controlfp
malloc
_wcsnicmp
memset
wcsrchr
exit
?terminate@@YAXXZ
free
__p__fmode

advapi32

CryptDeriveKey
CryptDestroyHash
GetTraceLoggerHandle
CryptExportKey
CryptDestroyKey
GetTraceEnableFlags
CryptGenRandom
CryptGetHashParam
CryptContextAddRef
CryptGetProvParam
CryptGetDefaultProviderW
CryptGenKey
CryptAcquireContextW
CryptCreateHash
UnregisterTraceGuids
RegisterTraceGuidsA
CryptReleaseContext
CryptHashData
GetTraceEnableLevel
TraceMessage

shell32

SHGetFolderPathW

wintrust

WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
WinVerifyTrust

crypt32

CryptProtectData
CertVerifyCertificateChainPolicy

ole32

CoCreateGuid

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9bd96022e712b80f03324c2fe1217f76

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

shell32

wintrust

crypt32

ole32

Sections

.text Size: 110KB - Virtual size: 109KB

.rdata Size: 40KB - Virtual size: 40KB

.data Size: 5KB - Virtual size: 5KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 110KB - Virtual size: 109KB

.rdata
Size: 40KB - Virtual size: 40KB

.data
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB