d460b6ccfdc408bd91ab4e5f816e531ae5562292295eeec94796e2b521bb5817

General

Target

d460b6ccfdc408bd91ab4e5f816e531ae5562292295eeec94796e2b521bb5817
Size

291KB
MD5

9171f18d3a5e4b387fc22991661adae0
SHA1

20ae9e99fd18e2141f62b054493fdcea9d045757
SHA256

d460b6ccfdc408bd91ab4e5f816e531ae5562292295eeec94796e2b521bb5817
SHA512

4e9868a8105db807b282326557d1483d303013a2af02b4a8fc99a148a176bbd64165dd3ffd966fc340cbf14f175e156bc365cea5888ab380298e6dc501b48b65
SSDEEP

6144:bz333oO1ywGcVXOO45S0FcYyEnVTVPUf2PEvWTulN6ANT1+8nCXKOm:b7nzlGcVQQDEnXPlPEv5RN8

Score

N/A

Malware Config

Signatures

Files

d460b6ccfdc408bd91ab4e5f816e531ae5562292295eeec94796e2b521bb5817
.exe windows x86

42b4899555cb4cd52821dcb8da608edd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetDriveTypeW
VirtualProtect
VirtualQueryEx
CopyFileA
GetCommandLineA
SetEvent
GetPrivateProfileSectionW
GetModuleHandleA
DeleteFileA
WriteConsoleW
lstrlenW
GetFileAttributesA
CancelIo
HeapDestroy
WriteConsoleW
GetStdHandle
WriteConsoleW
GetStartupInfoA
Sleep
lstrcpyA
GetProcessHeap

mmcndmgr

DllRegisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow

cryptui

CryptUIDlgViewContext
CryptUIWizBuildCTL
DllUnregisterServer
LocalEnrollNoDS
WizardFree
CryptUIWizDigitalSign
CryptUIStartCertMgr
LocalEnroll
LocalEnroll
CryptUIWizImport
DllRegisterServer
CryptUIWizExport
WizardFree

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impexp
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42b4899555cb4cd52821dcb8da608edd

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 1KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 16KB

.rdata Size: 512B - Virtual size: 296B

.rsrc Size: 284KB - Virtual size: 284KB

.rdata Size: 512B - Virtual size: 257B

.impexp Size: 512B - Virtual size: 112B

.text
Size: 1KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 16KB

.rdata
Size: 512B - Virtual size: 296B

.rsrc
Size: 284KB - Virtual size: 284KB

.rdata
Size: 512B - Virtual size: 257B

.impexp
Size: 512B - Virtual size: 112B