9712ce67d693eba658ddc1149fdda644e1d74b5c2147bbff8fdda7a403c29926

General

Target

9712ce67d693eba658ddc1149fdda644e1d74b5c2147bbff8fdda7a403c29926
Size

118KB
MD5

6635346954429b66c3bf02ab6b27fd10
SHA1

7f72af90d1818563d121003f6cdca5337763e396
SHA256

9712ce67d693eba658ddc1149fdda644e1d74b5c2147bbff8fdda7a403c29926
SHA512

ffe4b4a898be0e0e3b1270d50053e0b26fa187daac7ee37bf79412f39769c7e2a8c2da16d3aac722eac8054ee8e01d40495a8992ec3f5ef1cea57c93b3ad7590
SSDEEP

1536:9H1KYVNsuEGUJIsMY9Bq8pKjXafTo/DToobgrRd5AMjkbscQZ6QBVNEYlyTQDUfZ:KjBq0K+fM/Dw9bYY3bNoOUQTkh

Score

N/A

Malware Config

Signatures

Files

9712ce67d693eba658ddc1149fdda644e1d74b5c2147bbff8fdda7a403c29926
.exe windows x86

82bc9377eb559fef9573fbfbc314e7ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualQueryEx
VirtualProtect
Sleep
GetPrivateProfileSectionW
lstrlenW
ResumeThread
WriteConsoleW
WriteConsoleW
GetModuleHandleA
GetCommandLineA
GetDriveTypeW
DeleteFileA
HeapDestroy
GetStartupInfoA
GetProcessHeap
GetStdHandle
CopyFileA
lstrcpyA
SetEvent
WriteConsoleW
GetFileAttributesW

mmcndmgr

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServer

cryptui

LocalEnroll
CryptUIDlgViewContext
CryptUIWizImport
CryptUIWizDigitalSign
LocalEnrollNoDS
WizardFree
CryptUIStartCertMgr
DllUnregisterServer
DllRegisterServer
CryptUIWizBuildCTL
CryptUIWizExport
WizardFree
LocalEnroll

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impexp
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82bc9377eb559fef9573fbfbc314e7ac

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 2KB

.rdata Size: 512B - Virtual size: 296B

.rsrc Size: 110KB - Virtual size: 110KB

.rdata Size: 512B - Virtual size: 257B

.impexp Size: 512B - Virtual size: 80B

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 2KB

.rdata
Size: 512B - Virtual size: 296B

.rsrc
Size: 110KB - Virtual size: 110KB

.rdata
Size: 512B - Virtual size: 257B

.impexp
Size: 512B - Virtual size: 80B