a6391fdfb518d685b503d0f8df9709ffd9a40464eb12b37152347f8ce48b0117

General

Target

a6391fdfb518d685b503d0f8df9709ffd9a40464eb12b37152347f8ce48b0117
Size

291KB
MD5

5583cf34414dbb8130263835ae935ce0
SHA1

9beaa25673a089793ff84fdc61b7e1e073f9f598
SHA256

a6391fdfb518d685b503d0f8df9709ffd9a40464eb12b37152347f8ce48b0117
SHA512

15f725eee6174f93324aea544898cfb288f7340614ca2c7139d46da05783d68950b2cd6e2e327b34812b128bf8f1d908e8fe970e11ddbd12804d37a3a0a57975
SSDEEP

6144:n3oO1yk6vAfYLi34od2UHdzcE3FZD6ZUmc8cd3c0ZjdPaOM7A:3zAvqkiIod28c6rTmM3c0ZjdSn0

Score

N/A

Malware Config

Signatures

Files

a6391fdfb518d685b503d0f8df9709ffd9a40464eb12b37152347f8ce48b0117
.exe windows x86

dc9ee27f0483f255c50207f1e1074898

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
WriteConsoleW
VirtualProtect
GetProcessHeap
GetStartupInfoA
GetPrivateProfileSectionW
GetStdHandle
WriteConsoleW
Sleep
HeapDestroy
WriteConsoleW
CopyFileA
VirtualQueryEx
lstrlenW
SetEvent
GetFileAttributesA
lstrcpyA
GetCommandLineA
DeleteFileA
CancelIo
GetDriveTypeW

mmcndmgr

DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer

cryptui

LocalEnroll
CryptUIWizImport
CryptUIWizExport
CryptUIWizBuildCTL
DllUnregisterServer
LocalEnrollNoDS
DllRegisterServer
LocalEnroll
CryptUIWizDigitalSign
CryptUIStartCertMgr
WizardFree
WizardFree
CryptUIDlgViewContext

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impexp
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc9ee27f0483f255c50207f1e1074898

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 1KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 16KB

.rdata Size: 512B - Virtual size: 296B

.rsrc Size: 284KB - Virtual size: 284KB

.rdata Size: 512B - Virtual size: 257B

.impexp Size: 512B - Virtual size: 80B

.text
Size: 1KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 16KB

.rdata
Size: 512B - Virtual size: 296B

.rsrc
Size: 284KB - Virtual size: 284KB

.rdata
Size: 512B - Virtual size: 257B

.impexp
Size: 512B - Virtual size: 80B