6ebca2a5b757c45448405eb3698352b48afcac0d2f277b93a8c55a9ae4c5556c

Sharing

Copy URL

Twitter E-mail

General

Target

6ebca2a5b757c45448405eb3698352b48afcac0d2f277b93a8c55a9ae4c5556c
Size

197KB
MD5

a18a43d785c4b7b02fa6898087d21ad6
SHA1

ec2c802614fff64875a9f7ecbdd971f1c39dcacd
SHA256

6ebca2a5b757c45448405eb3698352b48afcac0d2f277b93a8c55a9ae4c5556c
SHA512

b8d0ad9ec8acd3cb90627f9f15f8e633b9b59bb0c7bc76f2f30aa5e4eb1f7b1eb093bfd98f7ec7b9e21281cc0a572168a31fb7f689aabf185a153b6555c36472
SSDEEP

6144:fFxkR2kKM8wLBrcgJBr9i8ydGWFtGbuiSCIIbaZgq+Ge2:48wVVaYmkI6n8

Score

N/A

Malware Config

Signatures

Files

6ebca2a5b757c45448405eb3698352b48afcac0d2f277b93a8c55a9ae4c5556c
.exe windows x86

2e37a1c0919a461263bd306a4dcc08d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

certcli

CAEnumNextCertType
CAFreeCertTypeProperty
CASetCertTypeProperty
CAAddCACertificateType
CASetCertTypeKeySpec
CARemoveCACertificateType
CAEnumCertTypesForCA
CAGetCertTypeProperty
CACloseCA
CAGetCertTypeKeySpec
CAUpdateCertType
CAUpdateCA
CAGetCertTypePropertyEx
CAGetCAProperty
CAFindByName
CASetCertTypeFlags
CAFindCertTypeByName
CACreateCertType
CACertTypeSetSecurity
CAGetCertTypeExtensions
CACloseCertType
CACertTypeGetSecurity
CAEnumCertTypes
CAGetCertTypeFlags
CAFreeCAProperty
CASetCertTypeExtension
CAFreeCertTypeExtensions

msvcrt

_wcsupr
__RTDynamicCast
wcscpy
_except_handler3
wcstoul
_wcsicmp
wcscat
wcscmp
wcsrchr
vswprintf
wcschr
wcsstr
wcslen
??2@YAPAXI@Z
free
_adjust_fdiv
??3@YAXPAX@Z
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_purecall
__dllonexit
malloc
_initterm
_onexit
mbstowcs
memmove

user32

GetDC
EnableWindow
PostMessageW
SendMessageW
LoadBitmapW
LoadImageW
SetCursor
InsertMenuItemW
GetDlgItem
GetParent
SetDlgItemTextW
LoadCursorW
LoadStringW
SetFocus
SetWindowLongW
GetDlgItemTextA
SetWindowTextW
SystemParametersInfoW
LoadIconW
EndDialog
RegisterClipboardFormatW
wsprintfW
WinHelpW
ReleaseDC
SendDlgItemMessageW
MessageBoxW
DialogBoxParamW
GetWindowLongW

kernel32

LoadLibraryW
GetACP
OutputDebugStringA
GetStartupInfoA
OutputDebugStringW
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetSystemTimeAsFileTime
lstrcpyW
GetSystemWindowsDirectoryW
SetLastError
GlobalLock
GetModuleHandleA
RemoveDirectoryA
LocalReAlloc
GetLastError
lstrcmpiW
InitializeCriticalSection
FileTimeToLocalFileTime
GetEnvironmentStringsW
CloseHandle
IsBadReadPtr
FormatMessageW
GetDateFormatW
GetSystemDefaultLangID
GlobalUnlock
GlobalAlloc
CreateFileW
GlobalFree
LocalFree
QueryPerformanceCounter
DeleteCriticalSection
WideCharToMultiByte
GetComputerNameW
GetModuleFileNameW
GetCurrentProcess
GetTickCount
SetUnhandledExceptionFilter
FileTimeToSystemTime

advapi32

RegEnumKeyExW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 6.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e37a1c0919a461263bd306a4dcc08d4

Headers

File Characteristics

Imports

certcli

msvcrt

user32

kernel32

advapi32

comctl32

Sections

.text Size: 113KB - Virtual size: 113KB

.data Size: 52KB - Virtual size: 52KB

.data Size: 27KB - Virtual size: 6.2MB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 113KB - Virtual size: 113KB

.data
Size: 52KB - Virtual size: 52KB

.data
Size: 27KB - Virtual size: 6.2MB

.rsrc
Size: 1KB - Virtual size: 1KB