0d44ba969227e76ec445f2056bc5c41ed34533ee5d9b70fdff757ea167a7355c

General

Target

0d44ba969227e76ec445f2056bc5c41ed34533ee5d9b70fdff757ea167a7355c
Size

118KB
MD5

6426377344fc5328425ea4e13b100890
SHA1

7ca7fe8c2f64eece413fd61935db54690f5def97
SHA256

0d44ba969227e76ec445f2056bc5c41ed34533ee5d9b70fdff757ea167a7355c
SHA512

f90ddeb4446c7891a6676b5cdafe950b99f91be3baf456b5f81371676e7f1581654326ce790e1cbdee4ca18108e1fc1d9f27f0c8ae7f300ad89ab95c6f965def
SSDEEP

3072:V7Xa3PBweOb1m22zzUpOQ8PZDVTyGeE/:JGBp2R2zm2TyGN

Score

N/A

Malware Config

Signatures

Files

0d44ba969227e76ec445f2056bc5c41ed34533ee5d9b70fdff757ea167a7355c
.exe windows x86

075b48f8e3bf66d0b9a84c4362031d6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
GetFileAttributesW
GetPrivateProfileSectionW
lstrlenW
VirtualQueryEx
SetEvent
ResumeThread
GetModuleHandleA
lstrcpyA
CopyFileA
WriteConsoleW
GetStartupInfoA
HeapDestroy
GetDriveTypeW
Sleep
DeleteFileA
GetCommandLineA
VirtualProtect
WriteConsoleW
WriteConsoleW
GetStdHandle

mmcndmgr

DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllRegisterServer

cryptui

WizardFree
CryptUIWizExport
DllUnregisterServer
LocalEnroll
LocalEnrollNoDS
LocalEnroll
CryptUIWizBuildCTL
CryptUIWizImport
WizardFree
DllRegisterServer
CryptUIDlgViewContext
CryptUIStartCertMgr
CryptUIWizDigitalSign

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.expimp
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

075b48f8e3bf66d0b9a84c4362031d6a

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 2KB

.rdata Size: 512B - Virtual size: 296B

.rsrc Size: 110KB - Virtual size: 110KB

.rdata Size: 512B - Virtual size: 257B

.expimp Size: 512B - Virtual size: 80B

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 2KB

.rdata
Size: 512B - Virtual size: 296B

.rsrc
Size: 110KB - Virtual size: 110KB

.rdata
Size: 512B - Virtual size: 257B

.expimp
Size: 512B - Virtual size: 80B