a0b0aaf3e3df7d683f5e6be7d460925f73cdb43e1bb0157007c0320944515d3d

General

Target

a0b0aaf3e3df7d683f5e6be7d460925f73cdb43e1bb0157007c0320944515d3d
Size

394KB
MD5

9699b02834522daea6173dd82e0b1b50
SHA1

37ef7926f5f19aba6db71acd5516938c3894e88f
SHA256

a0b0aaf3e3df7d683f5e6be7d460925f73cdb43e1bb0157007c0320944515d3d
SHA512

220ba09bd5df0731d56c31c91a7b0dec1e558a7c253b8a3bd535a2449a752db1aad76a484b2b1761aa6b5593a6e6a6b329b6899869939544dc0c4840a33fac7c
SSDEEP

6144:vQPQ6jBDhfKwSa9X3DiteOs9QFNsvLHcKaz6xTym3BILVDVmLDYNeXLsyR3bHs9f:vYQ+Ka53uteOWdFTyJgDdl69UdTrI5

Score

N/A

Malware Config

Signatures

Files

a0b0aaf3e3df7d683f5e6be7d460925f73cdb43e1bb0157007c0320944515d3d
.exe windows x86

fcec938720392437b3b36b48150b6b35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ResumeThread
VirtualQueryEx
lstrlenW
GetFileAttributesW
Sleep
HeapDestroy
WriteConsoleW
GetProcessHeap
GetStartupInfoA
GetPrivateProfileSectionW
DeleteFileA
WriteConsoleW
VirtualProtect
SetEvent
GetDriveTypeW
GetStdHandle
CopyFileA
WriteConsoleW
lstrcpyA
GetCommandLineA
GetModuleHandleA

mmcndmgr

DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllRegisterServer

cryptui

WizardFree
CryptUIWizExport
CryptUIStartCertMgr
WizardFree
CryptUIWizDigitalSign
LocalEnroll
CryptUIWizImport
CryptUIDlgViewContext
LocalEnroll
DllUnregisterServer
DllRegisterServer
CryptUIWizBuildCTL
LocalEnrollNoDS

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 387KB - Virtual size: 888KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impexp
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcec938720392437b3b36b48150b6b35

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 2KB

.rdata Size: 512B - Virtual size: 296B

.rsrc Size: 387KB - Virtual size: 888KB

.rdata Size: 512B - Virtual size: 257B

.impexp Size: 512B - Virtual size: 80B

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 2KB

.rdata
Size: 512B - Virtual size: 296B

.rsrc
Size: 387KB - Virtual size: 888KB

.rdata
Size: 512B - Virtual size: 257B

.impexp
Size: 512B - Virtual size: 80B