b20611677777277b95f9f1d441d4d6025a650d2b66a739e058a5e7642f07222a

General

Target

b20611677777277b95f9f1d441d4d6025a650d2b66a739e058a5e7642f07222a
Size

294KB
MD5

799ecdc850ebb7e80479bfff8741853a
SHA1

7b8c7564e3a1a5a81d7064a266eee3ee540c4eb6
SHA256

b20611677777277b95f9f1d441d4d6025a650d2b66a739e058a5e7642f07222a
SHA512

4ebacae10f456afa28a5da53ca8de292f70aaeb4c7e361999a9b50b13547b1951cbe04c593786721ac6b860be0756cb6732ab9b2365d8a29c634596384676277
SSDEEP

6144:M2dMBPkzW811NoInYp24aOyT0KFkk3ylded++db4k+SV4hvsAa1p7OjoerZgh:ndEsSC16InYU+Kzyjed++dkxUsvy13YY

Score

N/A

Malware Config

Signatures

Files

b20611677777277b95f9f1d441d4d6025a650d2b66a739e058a5e7642f07222a
.exe windows x86

b9c00bc8df78534caeb1c8f848a6642e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetPriorityClass
HeapDestroy
lstrlenW
WriteConsoleW
DisconnectNamedPipe
CreatePipe
ResumeThread
GetStartupInfoA
CopyFileA
VirtualProtect
GetStdHandle
DeleteFileA
WriteConsoleW
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
WriteConsoleW
GetFileAttributesW
GetProcessHeap
lstrcpyA
SetEvent

mmcndmgr

DllRegisterServer
DllCanUnloadNow
DllRegisterServer
DllGetClassObject

cryptui

CryptUIStartCertMgr
WizardFree
WizardFree
CryptUIWizBuildCTL
CryptUIWizExport
DllUnregisterServer
CryptUIDlgViewContext
LocalEnroll
CryptUIWizImport
CryptUIWizDigitalSign
CryptUIWizBuildCTL
DllRegisterServer
LocalEnroll

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impdata
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b9c00bc8df78534caeb1c8f848a6642e

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 3KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 3KB

.rdata Size: 512B - Virtual size: 264B

.rsrc Size: 285KB - Virtual size: 284KB

.rdata Size: 512B - Virtual size: 177B

.impdata Size: 512B - Virtual size: 195B

.text
Size: 3KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 3KB

.rdata
Size: 512B - Virtual size: 264B

.rsrc
Size: 285KB - Virtual size: 284KB

.rdata
Size: 512B - Virtual size: 177B

.impdata
Size: 512B - Virtual size: 195B