a637b166f2dfec0298ea4e834e544777b6fa8f04763ea28e2462d4e46b693be6

Sharing

Copy URL Twitter E-mail

General

Target

a637b166f2dfec0298ea4e834e544777b6fa8f04763ea28e2462d4e46b693be6
Size

132KB
MD5

215c2c59fd71ca002c52611ba7e95f68
SHA1

c1a70c35ad19b27eeaca70713127f78cfc6a1842
SHA256

a637b166f2dfec0298ea4e834e544777b6fa8f04763ea28e2462d4e46b693be6
SHA512

200fb1b842d260afa7a093f4696053b4162af99635b9eb91d0cae7075b5df36f9609a5fa44fc38a0b0a464566ba1efd3b5e96f7d002f95acf94d655b6582f803
SSDEEP

3072:Ab0Shsj9GuK3JuVbd3LuKu/ScIH5mOJ3/Rq:g0S6jzK3kVd/u/8/

Score

N/A

Malware Config

Signatures

Files

a637b166f2dfec0298ea4e834e544777b6fa8f04763ea28e2462d4e46b693be6
.exe windows x86

ff21bfaefb56ed76335347526213457b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winscard

SCardBeginTransaction
SCardCancel
SCardConnectW
SCardControl
SCardDisconnect
SCardEndTransaction
SCardEstablishContext
SCardForgetReaderW
SCardForgetReaderGroupW
SCardGetAttrib
SCardGetStatusChangeW
SCardIntroduceReaderW
SCardIntroduceReaderGroupW
SCardIsValidContext
SCardListReaderGroupsW
SCardListReadersW
SCardLocateCardsA
SCardSetAttrib
SCardState
SCardStatusW

kernel32

GetProcAddress
LCMapStringW
LCMapStringA
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetModuleFileNameA
WriteFile
RtlUnwind
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameW
WritePrivateProfileStringW
VirtualProtect
GetSystemInfo
MultiByteToWideChar
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoW
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

spscmbe
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ff21bfaefb56ed76335347526213457b

Headers

File Characteristics

Imports

winscard

kernel32

Sections

.text Size: 88KB - Virtual size: 84KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 16KB - Virtual size: 342KB

.tls Size: 4KB - Virtual size: 860B

.rsrc Size: 8KB - Virtual size: 36KB

spscmbe Size: - Virtual size: 4KB

.text
Size: 88KB - Virtual size: 84KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 16KB - Virtual size: 342KB

.tls
Size: 4KB - Virtual size: 860B

.rsrc
Size: 8KB - Virtual size: 36KB

spscmbe
Size: - Virtual size: 4KB