d536410514c140d66bf7f21c403113efb01d59732450756365177e0601cef59f

General

Target

d536410514c140d66bf7f21c403113efb01d59732450756365177e0601cef59f
Size

118KB
MD5

2078845d67954174fcae7272d2897db8
SHA1

ed1ce218829a3d878cc11b25e0d7c26119409017
SHA256

d536410514c140d66bf7f21c403113efb01d59732450756365177e0601cef59f
SHA512

991f9d94d5eaed28ae7c27f0b30fd15d3a7ff64f36c58baab3dbfe35a0e82917197fc910dd98150a2bb2a0fe6e854448267401d70b141a3d2d09ab60edb7e499
SSDEEP

1536:kIF0bUIKqHZ/RhPBsIIcB7wuYTOyUKTwqnnrRrqiuOqPJAkl7nSdYHubgU454OT:kIedHBPZB7YTdZTRFrqiZCpSya459

Score

N/A

Malware Config

Signatures

Files

d536410514c140d66bf7f21c403113efb01d59732450756365177e0601cef59f
.exe windows x86

3a82084086e4ec2a868ae3bc43a3ecf2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStartupInfoA
Sleep
GetModuleHandleA
WriteConsoleW
VirtualQueryEx
GetStdHandle
CopyFileA
GetFileAttributesW
lstrcpyA
HeapDestroy
GetDriveTypeW
VirtualProtect
WriteConsoleW
DeleteFileA
ResumeThread
SetEvent
GetProcessHeap
GetCommandLineA
GetPrivateProfileSectionW
lstrlenW
WriteConsoleW

mmcndmgr

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServer

cryptui

WizardFree
DllUnregisterServer
DllRegisterServer
CryptUIWizBuildCTL
CryptUIStartCertMgr
LocalEnroll
LocalEnroll
CryptUIDlgViewContext
CryptUIWizImport
WizardFree
CryptUIWizExport
LocalEnrollNoDS
CryptUIWizDigitalSign

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.expimp
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a82084086e4ec2a868ae3bc43a3ecf2

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 2KB

.rdata Size: 512B - Virtual size: 296B

.rsrc Size: 110KB - Virtual size: 110KB

.rdata Size: 512B - Virtual size: 257B

.expimp Size: 512B - Virtual size: 80B

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 2KB

.rdata
Size: 512B - Virtual size: 296B

.rsrc
Size: 110KB - Virtual size: 110KB

.rdata
Size: 512B - Virtual size: 257B

.expimp
Size: 512B - Virtual size: 80B