3cebb246cee60a96f87fe91c80d70a3db52811495d9030a95316c139cbcb7675

General

Target

3cebb246cee60a96f87fe91c80d70a3db52811495d9030a95316c139cbcb7675
Size

118KB
MD5

452cb1afb9b651057d71cbab8da95860
SHA1

1c3267823eb8b680c5688dd64a5f2a99554f1d49
SHA256

3cebb246cee60a96f87fe91c80d70a3db52811495d9030a95316c139cbcb7675
SHA512

bf4689cce402f59783275870ebd80d32f080a131cb9123a12d21c65c306ef67ec1620827096646e4f9632ec412fdd29da49508ddf4957262e700e0cde2f5cfda
SSDEEP

3072:Pk72YUSf2a/f516b1J5cWD1z1iqCatLjlK:8tf/b6r5t52ay

Score

N/A

Malware Config

Signatures

Files

3cebb246cee60a96f87fe91c80d70a3db52811495d9030a95316c139cbcb7675
.exe windows x86

23bfbb7c6a323ce3a36672cf94bcf7a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteConsoleW
WriteConsoleW
GetFileAttributesW
VirtualProtect
GetDriveTypeW
WriteConsoleW
GetStartupInfoA
GetModuleHandleA
SetEvent
VirtualQueryEx
lstrcpyA
GetPrivateProfileSectionW
GetProcessHeap
CopyFileA
CancelIo
GetCommandLineA
DeleteFileA
GetStdHandle
lstrlenW
Sleep
HeapDestroy

mmcndmgr

DllRegisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow

cryptui

CryptUIWizBuildCTL
CryptUIWizDigitalSign
LocalEnrollNoDS
CryptUIStartCertMgr
DllRegisterServer
WizardFree
CryptUIWizExport
LocalEnroll
LocalEnroll
DllUnregisterServer
WizardFree
CryptUIWizImport
CryptUIDlgViewContext

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impexp
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23bfbb7c6a323ce3a36672cf94bcf7a1

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 2KB

.rdata Size: 512B - Virtual size: 296B

.rsrc Size: 110KB - Virtual size: 110KB

.rdata Size: 512B - Virtual size: 257B

.impexp Size: 512B - Virtual size: 80B

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 2KB

.rdata
Size: 512B - Virtual size: 296B

.rsrc
Size: 110KB - Virtual size: 110KB

.rdata
Size: 512B - Virtual size: 257B

.impexp
Size: 512B - Virtual size: 80B