8aa5fc4ffab2217faf3397e4403c09164497f5c433d5e23b8375e8ea1fb33ff4

Sharing

Copy URL Twitter E-mail

General

Target

8aa5fc4ffab2217faf3397e4403c09164497f5c433d5e23b8375e8ea1fb33ff4
Size

119KB
MD5

a0f038d749c79b312a4c81bd814ad6dc
SHA1

6131bfabc763ad53a35d07a806b7f8bd6e7b3bdb
SHA256

8aa5fc4ffab2217faf3397e4403c09164497f5c433d5e23b8375e8ea1fb33ff4
SHA512

d48fc400a1e75c4d2f44c23a5fa8f4765bd6770eac8d0290a96f010308041fe32a29efa58a71d1e13b11b1fc784c4a94e16069cafa54b1213a194ee7b1a49c4b
SSDEEP

1536:7zQCjQFBp809Mdox1Tj1bRjwH9xNDhIa70iMho3HqUKlwLFfFHJGVyY6+PQDrD/B:3TQp809M0vjytDCcpqanXY4tz

Score

N/A

Malware Config

Signatures

Files

8aa5fc4ffab2217faf3397e4403c09164497f5c433d5e23b8375e8ea1fb33ff4
.exe windows x86

a4eab246e9750f5da9414c374b9e16c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_wcsnicmp
printf
_except_handler3
wcscpy
wcscat
fgetws
towupper
_iob
_putws
wcscmp
swprintf
malloc
free
_wcsicmp
wcschr
wcslen
_get_osfhandle

advapi32

QueryUsersOnEncryptedFile
CryptGetUserKey
FreeEncryptionCertificateHashList
CryptAcquireContextW
CryptGenKey
GetUserNameW
CryptDestroyKey
CryptReleaseContext
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
DecryptFileW
EncryptFileW
SetUserFileEncryptionKey

kernel32

GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
LoadLibraryA
GetModuleHandleW
GetVersionExA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetDiskFreeSpaceA
GlobalMemoryStatus
GetLocalTime
FindNextVolumeW
LoadLibraryExA
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryW
GetConsoleMode
GetStdHandle
GetFileType
LocalFree
WriteFile
LocalAlloc
WideCharToMultiByte
lstrlenW
WriteConsoleW
FormatMessageW
lstrcpyW
lstrcatW
CloseHandle
SetLastError
GetCurrentProcess
FindClose
FindNextFileW
lstrcmpW
FindFirstFileW
GetFileAttributesW
GetComputerNameW
QueryDosDeviceW
GetVolumeNameForVolumeMountPointW
CreateFileW
FindVolumeClose
EnterCriticalSection
GetVolumeInformationW
FindFirstVolumeW
SetErrorMode
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
ReadConsoleA
SetConsoleMode
MultiByteToWideChar
GetConsoleOutputCP
lstrlenA
DeleteCriticalSection
VirtualAlloc
InitializeCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
InterlockedExchangeAdd
VirtualFree
HeapFree
HeapAlloc
GetProcessHeap
DeviceIoControl
SetEndOfFile
SetFilePointer
RemoveDirectoryW
FlushFileBuffers
GetTempFileNameW
CreateDirectoryW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeW
GetVolumePathNameW
VerifyVersionInfoW
VerSetConditionMask
GetFullPathNameW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetCommandLineW
QueryPerformanceCounter
GetTickCount

rpcrt4

UuidToStringW
UuidCreate
RpcStringFreeW

shell32

CommandLineToArgvW

user32

wsprintfW
MessageBoxW

crypt32

CertStrToNameW
CertCreateSelfSignCertificate
CertFreeCertificateContext
CryptEncodeObject
PFXExportCertStoreEx
CertFindCertificateInStore
CertGetCertificateContextProperty
CertOpenStore
CertCloseStore
CertAddCertificateContextToStore

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4eab246e9750f5da9414c374b9e16c9

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

rpcrt4

shell32

user32

crypt32

Sections

.text Size: 42KB - Virtual size: 41KB

.data Size: 512B - Virtual size: 3KB

Size: 62KB - Virtual size: 62KB

.rsrc Size: 13KB - Virtual size: 12KB

.text
Size: 42KB - Virtual size: 41KB

.data
Size: 512B - Virtual size: 3KB

.rsrc
Size: 13KB - Virtual size: 12KB