d619dee891dc5285865b77d007ffffa0382d098b1731994517a43b245e445ba2

Sharing

Copy URL Twitter E-mail

General

Target

d619dee891dc5285865b77d007ffffa0382d098b1731994517a43b245e445ba2
Size

67KB
MD5

90eaee96b2160b647e2cb910c1582ab0
SHA1

ccdfcf53b9f206788cf3dc894e277ef3a7e5f871
SHA256

d619dee891dc5285865b77d007ffffa0382d098b1731994517a43b245e445ba2
SHA512

23bc274b24982033bc10ddea6845c4ac46815acf0d0c09f156401411ccf2a6a142b19a836d4a6d8dd2f32d18d646846478857b6671b71f5eff67995caabadfb5
SSDEEP

768:CDkACrfTTnUCnDURSiBZCHHC4DCWoh+e8RtoHNaF6ayX+cCXkEGHTpEF7:CuHDgSssHC4GWQ+/RtoHxayNTEG9

Score

N/A

Malware Config

Signatures

Files

d619dee891dc5285865b77d007ffffa0382d098b1731994517a43b245e445ba2
.exe windows x86

221f9b45c3d95c687d29d276c31629f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptSetOIDFunctionValue
CertEnumCTLsInStore
CertDuplicateStore
CryptVerifyDetachedMessageSignature
CryptMemAlloc
CertUnregisterSystemStore
CertGetCertificateChain
CryptUnprotectData
CertCloseStore
CryptSIPAddProvider
CryptUninstallDefaultContext
CryptMsgVerifyCountersignatureEncodedEx
CryptUnregisterOIDInfo
CertFindCTLInStore
CertGetCertificateContextProperty
CryptGetMessageSignerCount
CertCompareCertificateName
CertEnumSubjectInSortedCTL
CertAddSerializedElementToStore
CertFreeCRLContext
CertFindRDNAttr
CryptGetMessageCertificates
CryptQueryObject
CryptVerifyCertificateSignature
PFXExportCertStore
CertGetPublicKeyLength
CertFindCertificateInCRL
CryptImportPublicKeyInfo
CertGetIntendedKeyUsage
CryptMsgClose
CryptInstallOIDFunctionAddress
CryptSIPVerifyIndirectData
CryptExportPKCS8
CertCreateCRLContext
CryptEnumOIDInfo
PFXImportCertStore
CertGetNameStringW
CryptEnumKeyIdentifierProperties
CertCreateCertificateChainEngine
CertAddStoreToCollection
CryptSignAndEncodeCertificate
CertEnumCertificateContextProperties

clusapi

ClusterNodeOpenEnum
SetClusterNetworkPriorityOrder
ClusterNetworkCloseEnum
CloseClusterResource
GetClusterNetworkId
GetClusterNetworkKey
ClusterRegQueryValue
GetClusterGroupKey
ClusterGroupOpenEnum
ClusterRegEnumKey
ClusterNodeCloseEnum
GetClusterResourceKey
DeleteClusterGroup
SetClusterGroupName
ClusterResourceTypeControl
ClusterGroupEnum
SetClusterGroupNodeList
GetClusterFromNetwork
CloseClusterNotifyPort
ClusterNetInterfaceControl
ClusterGroupControl
GetClusterNotify
OpenCluster
ClusterNetworkControl
RemoveClusterResourceNode
SetClusterQuorumResource
CreateClusterNotifyPort
ClusterControl
RemoveClusterResourceDependency
ClusterResourceTypeCloseEnum
GetClusterGroupState
GetClusterNetInterfaceState
CloseClusterNetInterface
PauseClusterNode
BackupClusterDatabase
ChangeClusterResourceGroup
ClusterOpenEnum
CloseClusterGroup
ClusterRegDeleteValue
GetNodeClusterState
ClusterResourceEnum
ResumeClusterNode
OnlineClusterResource
ClusterResourceTypeOpenEnum
CreateClusterResource
ClusterEnum
ClusterRegOpenKey
AddClusterResourceDependency
GetClusterNodeKey
ClusterResourceCloseEnum
GetClusterFromResource
GetClusterNodeId
SetClusterNetworkName
ClusterNetworkOpenEnum
ClusterRegQueryInfoKey
GetClusterFromNode

user32

EndDialog
SendMessageW
DialogBoxParamA

wintrust

WVTAsn1SpcStatementTypeDecode
WintrustLoadFunctionPointers
WintrustAddDefaultForUsage
WinVerifyTrustEx
SoftpubDumpStructure
TrustOpenStores
WTHelperGetFileName
CryptCATGetAttrInfo
WVTAsn1SpcSpOpusInfoDecode
CryptCATAdminCalcHashFromFileHandle
CryptCATEnumerateCatAttr
SoftpubLoadSignature
WVTAsn1SpcIndirectDataContentDecode
CryptCATPutCatAttrInfo
CryptSIPRemoveSignedDataMsg
TrustFreeDecode
WTHelperGetProvCertFromChain
CryptCATOpen
OfficeCleanupPolicy
WintrustGetRegPolicyFlags
SoftpubCheckCert
WintrustGetDefaultForUsage
CryptSIPPutSignedDataMsg
WintrustAddActionID
CryptCATCDFEnumMembers
WintrustSetRegPolicyFlags
WTHelperIsInRootStore
WVTAsn1SpcLinkDecode
WVTAsn1SpcSpAgencyInfoEncode
CryptCATGetCatAttrInfo
CryptCATGetMemberInfo
CryptCATHandleFromStore
SoftpubInitialize
WVTAsn1SpcSigInfoEncode
MsCatConstructHashTag
WVTAsn1SpcFinancialCriteriaInfoDecode
WVTAsn1CatMemberInfoEncode
CryptCATAdminAddCatalog
WVTAsn1CatMemberInfoDecode
WVTAsn1SpcLinkEncode
CryptSIPGetSignedDataMsg
WVTAsn1CatNameValueEncode
WTHelperOpenKnownStores
WinVerifyTrust
SoftpubAuthenticode
CryptCATAdminReleaseContext
MsCatFreeHashTag
WTHelperGetFileHandle
WTHelperCertIsSelfSigned
WTHelperCheckCertUsage
CryptCATCDFClose
CryptCATPutAttrInfo
WTHelperGetAgencyInfo
DriverInitializePolicy
CryptSIPCreateIndirectData
mscat32DllRegisterServer
CryptCATAdminAcquireContext
CryptCATEnumerateMember
CryptCATAdminReleaseCatalogContext
WTHelperGetProvSignerFromChain
WVTAsn1SpcSigInfoDecode
CryptCATCatalogInfoFromContext
HTTPSFinalProv

kernel32

SetSystemTimeAdjustment
GetProcAddress
FileTimeToLocalFileTime

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

221f9b45c3d95c687d29d276c31629f4

Headers

File Characteristics

Imports

crypt32

clusapi

user32

wintrust

kernel32

Sections

.text Size: 41KB - Virtual size: 41KB

.data Size: 8KB - Virtual size: 7KB

.rdata Size: 6KB - Virtual size: 5KB

.rsrc Size: 10KB - Virtual size: 12KB

.text
Size: 41KB - Virtual size: 41KB

.data
Size: 8KB - Virtual size: 7KB

.rdata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 10KB - Virtual size: 12KB