General

Malware Config

Signatures

Files

• fa18244202716f1f37c3e11e5dcc1496f3b39731543bc4c12b93fb0b4a56f5f8

  .exe windows x86

  60f1b020a5f3dd9bd4d309908fffbf56

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  kernel32

  DeleteFileA

  GetPriorityClass

  HeapDestroy

  CopyFileA

  WriteConsoleW

  WriteConsoleW

  lstrlenW

  GetProcessHeap

  DisconnectNamedPipe

  lstrcpyA

  GetCurrentDirectoryA

  VirtualProtect

  CreatePipe

  GetFileAttributesW

  GetStdHandle

  GetModuleHandleA

  SetEvent

  GetStartupInfoA

  GetCommandLineA

  WriteConsoleW

  ResumeThread

  mmcndmgr

  DllCanUnloadNow

  DllRegisterServer

  DllGetClassObject

  DllRegisterServer

  cryptui

  CryptUIWizDigitalSign

  WizardFree

  DllUnregisterServer

  DllRegisterServer

  CryptUIWizExport

  LocalEnroll

  LocalEnroll

  CryptUIDlgViewContext

  CryptUIWizBuildCTL

  CryptUIWizImport

  CryptUIWizBuildCTL

  CryptUIStartCertMgr

  WizardFree

  Sections

  .text

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 512B - Virtual size: 264B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 110KB - Virtual size: 110KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 512B - Virtual size: 177B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .impdata

  Size: 512B - Virtual size: 195B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE