24d2322580eefc6139ab90bb1d6c32540b285da390f017794fef6fc5d8ba70b9

General

Target

24d2322580eefc6139ab90bb1d6c32540b285da390f017794fef6fc5d8ba70b9
Size

292KB
MD5

80bf4ef7aa8518166a4bf1223361df50
SHA1

369e918cdea6a4bc32533f314f04b1fd7b709869
SHA256

24d2322580eefc6139ab90bb1d6c32540b285da390f017794fef6fc5d8ba70b9
SHA512

6f43706b99d04f243b955455de95387d5cee4ccec877fb492e6c4b6495f588d0efa758847789f0ba7a8dfb91a6187468f4164fa32534403cf1ce0867dbadf0bc
SSDEEP

6144:Zve2+6S+agqkVbVtFAzezyRrelwIRIUX0+hE5zDWsw9hZS0Eoqz:ZvH+wagqkZPFuiy87RIU7azDxwfZShz

Score

N/A

Malware Config

Signatures

Files

24d2322580eefc6139ab90bb1d6c32540b285da390f017794fef6fc5d8ba70b9
.exe windows x86

1cdf0ae41760a79992548dc1be658fbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualQueryEx
GetStartupInfoA
DeleteFileA
GetModuleHandleA
CopyFileA
lstrcpyA
WriteConsoleW
GetFileAttributesW
WriteConsoleW
WriteConsoleW
Sleep
VirtualProtect
GetProcessHeap
lstrlenW
HeapDestroy
GetPrivateProfileSectionW
GetStdHandle
CancelIo
SetEvent
GetDriveTypeW
GetCommandLineA

mmcndmgr

DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer

cryptui

LocalEnroll
WizardFree
CryptUIWizBuildCTL
CryptUIStartCertMgr
CryptUIDlgViewContext
CryptUIWizDigitalSign
DllRegisterServer
CryptUIWizImport
WizardFree
LocalEnroll
LocalEnrollNoDS
DllUnregisterServer
CryptUIWizExport

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impexp
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1cdf0ae41760a79992548dc1be658fbb

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 2KB

.rdata Size: 512B - Virtual size: 296B

.rsrc Size: 284KB - Virtual size: 284KB

.rdata Size: 512B - Virtual size: 257B

.impexp Size: 512B - Virtual size: 80B

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 2KB

.rdata
Size: 512B - Virtual size: 296B

.rsrc
Size: 284KB - Virtual size: 284KB

.rdata
Size: 512B - Virtual size: 257B

.impexp
Size: 512B - Virtual size: 80B