cf8c23fbe33b89888a7571557f8b219aedd502dcba82a80e2e73f5db206ae64d

General

Target

cf8c23fbe33b89888a7571557f8b219aedd502dcba82a80e2e73f5db206ae64d
Size

294KB
MD5

64e6d981601433dc63ee062c5fa927f0
SHA1

8fc5dfdc8fb0d6fdf03f157e9e64b225533055dc
SHA256

cf8c23fbe33b89888a7571557f8b219aedd502dcba82a80e2e73f5db206ae64d
SHA512

2e43dceb452403df26ac4384234a71a703d7a0ae79aaf40776b2cea1419979e4a5e76a172a4d165a866bdec6e62a5ea6ef93596721e161b66dd782883f7e8666
SSDEEP

6144:MD52dMBPkTqhT/RK92utKHPidgFYZ8gQ3TfZL5P3/pXPI/p70YoVt+ctG3ah:RdEsTGRTuQvugSZ853dL5PPOyYo7+OAm

Score

N/A

Malware Config

Signatures

Files

cf8c23fbe33b89888a7571557f8b219aedd502dcba82a80e2e73f5db206ae64d
.exe windows x86

6d67d351f3bb57763c6c5f180f2ce9a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
GetStartupInfoA
WriteConsoleW
lstrlenW
GetModuleHandleA
SetEvent
DeleteFileA
CopyFileA
GetCommandLineA
CreatePipe
WriteConsoleW
lstrcpyA
WriteConsoleW
ResumeThread
HeapDestroy
GetFileAttributesW
GetPriorityClass
DisconnectNamedPipe
VirtualProtect
GetCurrentDirectoryA
GetStdHandle

mmcndmgr

DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer

cryptui

WizardFree
DllRegisterServer
WizardFree
CryptUIStartCertMgr
LocalEnroll
CryptUIWizImport
DllUnregisterServer
CryptUIDlgViewContext
CryptUIWizBuildCTL
CryptUIWizBuildCTL
CryptUIWizExport
LocalEnroll
CryptUIWizDigitalSign

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impdata
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6d67d351f3bb57763c6c5f180f2ce9a5

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 3KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 3KB

.rdata Size: 512B - Virtual size: 264B

.rsrc Size: 285KB - Virtual size: 284KB

.rdata Size: 512B - Virtual size: 177B

.impdata Size: 512B - Virtual size: 195B

.text
Size: 3KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 3KB

.rdata
Size: 512B - Virtual size: 264B

.rsrc
Size: 285KB - Virtual size: 284KB

.rdata
Size: 512B - Virtual size: 177B

.impdata
Size: 512B - Virtual size: 195B