323a8802c0cded6ddf19308818d6f77d945f49b1c8fc887d92cb5e463184563f

Sharing

Copy URL Twitter E-mail

General

Target

323a8802c0cded6ddf19308818d6f77d945f49b1c8fc887d92cb5e463184563f
Size

201KB
MD5

7c36c0d3ef9d087d9915cedfb6fa670c
SHA1

cc06d30c2e08e17642924917ec50698e2e56493f
SHA256

323a8802c0cded6ddf19308818d6f77d945f49b1c8fc887d92cb5e463184563f
SHA512

ebcea552439b9fdfe3acbbbf792d8a2b2f97003ab9743cc122e1bf81c63ed06fcb6ca7fd9869b483c56847494b3bef9f2b8bb628c4d2097c8e5ca592182d8888
SSDEEP

3072:fhclzodLPk4ldwjBjbfZQfxOlw1YYfuD8gOnVOV4+voLhNi2yM+gKD2gHF8M:fhci7bwpfm0ymYfuxp4UolNhb+gKDhF3

Score

N/A

Malware Config

Signatures

Files

323a8802c0cded6ddf19308818d6f77d945f49b1c8fc887d92cb5e463184563f
.exe windows x86

d0e180b511f1850f36a001a241d1a311

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

certcli

CAGetCertTypeProperty
CACloseCertType
CAUpdateCA
CAFreeCertTypeExtensions
CAGetCertTypeFlags
CAGetCertTypeKeySpec
CASetCertTypeFlags
CAFindByName
CAGetCertTypeExtensions
CACertTypeSetSecurity
CAGetCAProperty
CAEnumCertTypesForCA
CARemoveCACertificateType
CAAddCACertificateType
CAEnumCertTypes
CASetCertTypeKeySpec
CASetCertTypeExtension
CAEnumNextCertType
CAUpdateCertType
CAGetCertTypePropertyEx
CAFreeCertTypeProperty
CAFreeCAProperty
CASetCertTypeProperty
CACreateCertType
CACertTypeGetSecurity
CACloseCA
CAFindCertTypeByName

kernel32

CloseHandle
WideCharToMultiByte
LocalReAlloc
InterlockedIncrement
FormatMessageW
lstrlenW
lstrcmpiW
OutputDebugStringA
InitializeCriticalSection
GetModuleHandleA
GetComputerNameW
LoadLibraryW
InterlockedDecrement
OutputDebugStringW
GetACP
IsBadReadPtr
lstrcpyW
GetTickCount
GetLastError
FileTimeToLocalFileTime
GetSystemWindowsDirectoryW
GetEnvironmentStringsW
GetDateFormatW
GetModuleFileNameW
GetSystemDefaultLangID
FileTimeToSystemTime
DeleteCriticalSection
RemoveDirectoryA
LocalFree
SetUnhandledExceptionFilter
SetLastError
CreateFileW
GlobalLock
QueryPerformanceCounter
GetStartupInfoA
GlobalAlloc
GlobalUnlock
GetCurrentProcess
GlobalFree
GetSystemTimeAsFileTime

user32

LoadBitmapW
GetDlgItemTextA
wsprintfW
SetWindowTextW
GetWindowLongW
GetDC
LoadCursorW
EnableWindow
WinHelpW
PostMessageW
SetCursor
LoadStringW
SetFocus
EndDialog
InsertMenuItemW
RegisterClipboardFormatW
SendMessageW
SetDlgItemTextW
ReleaseDC
SetWindowLongW
SystemParametersInfoW
MessageBoxW
GetDlgItem
SendDlgItemMessageW
LoadIconW
DialogBoxParamW
LoadImageW
GetParent

msvcrt

wcscpy
__dllonexit
wcstoul
_except_handler3
_wcsupr
malloc
_wcsicmp
?terminate@@YAXXZ
mbstowcs
wcscmp
wcscat
memmove
vswprintf
??3@YAXPAX@Z
__RTDynamicCast
??2@YAPAXI@Z
wcsrchr
_purecall
wcschr
_adjust_fdiv
_onexit
_initterm
free
??1type_info@@UAE@XZ
wcsstr
wcslen

advapi32

RegCloseKey
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegQueryValueExW
RegDeleteKeyW
RegOpenKeyExW

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 6.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0e180b511f1850f36a001a241d1a311

Headers

File Characteristics

Imports

certcli

kernel32

user32

msvcrt

advapi32

comctl32

Sections

.text Size: 116KB - Virtual size: 115KB

.data Size: 49KB - Virtual size: 49KB

.data Size: 31KB - Virtual size: 6.2MB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 116KB - Virtual size: 115KB

.data
Size: 49KB - Virtual size: 49KB

.data
Size: 31KB - Virtual size: 6.2MB

.rsrc
Size: 3KB - Virtual size: 2KB