f30f1dc2bd881a61ce11db043ed1e1b1ea29b015bd56ca099914858478eb90b9

General

Target

f30f1dc2bd881a61ce11db043ed1e1b1ea29b015bd56ca099914858478eb90b9
Size

117KB
MD5

a0b9f96034a44d45c7d28481d4dd78e0
SHA1

b07a8b37888b13670f89a1efb70f9d56a3e96609
SHA256

f30f1dc2bd881a61ce11db043ed1e1b1ea29b015bd56ca099914858478eb90b9
SHA512

be34dc7345a4eb907637a07990670b602aaba4ed4bb6f9e1fa241d1d609709933184653c689fd2db1a2e9b5c3d183c6a9123ec1db4911435b181ca8172ad7e55
SSDEEP

1536:5jqQ+7KHUIkASJxK5Lakew4MQ+bDEWZlefBRg4WwzDwSeT2JDJnCGW994CoK1JPy:9UuEeoAl+BJPxJ9CGm4CoKPnYyu

Score

N/A

Malware Config

Signatures

Files

f30f1dc2bd881a61ce11db043ed1e1b1ea29b015bd56ca099914858478eb90b9
.exe windows x86

4d766ad42a7138890342f712d3b617a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStartupInfoA
WriteConsoleW
CancelIo
CopyFileA
HeapDestroy
DeleteFileA
GetPrivateProfileSectionW
GetProcessHeap
VirtualProtect
GetModuleHandleA
WriteConsoleW
GetDriveTypeW
lstrlenW
GetStdHandle
SetEvent
WriteConsoleW
GetFileAttributesA
GetCommandLineA
lstrcpyA
VirtualQueryEx
Sleep

mmcndmgr

DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllRegisterServer

cryptui

CryptUIWizImport
CryptUIStartCertMgr
WizardFree
CryptUIWizDigitalSign
WizardFree
DllUnregisterServer
LocalEnroll
LocalEnrollNoDS
CryptUIWizExport
DllRegisterServer
CryptUIDlgViewContext
LocalEnroll
CryptUIWizBuildCTL

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impexp
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d766ad42a7138890342f712d3b617a7

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 1KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 16KB

.rdata Size: 512B - Virtual size: 296B

.rsrc Size: 110KB - Virtual size: 110KB

.rdata Size: 512B - Virtual size: 257B

.impexp Size: 512B - Virtual size: 80B

.text
Size: 1KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 16KB

.rdata
Size: 512B - Virtual size: 296B

.rsrc
Size: 110KB - Virtual size: 110KB

.rdata
Size: 512B - Virtual size: 257B

.impexp
Size: 512B - Virtual size: 80B