f3574eabe2e3474cc3a3dc45b98575ecefcb9ebf772140048c6437076fbb010a

General

Target

f3574eabe2e3474cc3a3dc45b98575ecefcb9ebf772140048c6437076fbb010a
Size

291KB
MD5

0c21c90fb8b5f7ea54637cc73512e310
SHA1

2fb7845f091924d729d89dfd3e736c0b00e2dcf0
SHA256

f3574eabe2e3474cc3a3dc45b98575ecefcb9ebf772140048c6437076fbb010a
SHA512

7f113e408a9466d6c999ecc94d096c81dc80668130a1e2eb00462fcfb23c41e0757570ae3ed919b06f46cb6e2f2bd6d1db2f32230501eddf8b913b176cb26ead
SSDEEP

6144:8hwOpN3oO1yzKeCEJehVYGcSHdU4UVGUHsDZLVrkswwPNJHlUdpwR5EK:Kw6pzGKef8jcSHVUceQxkswaxGpw3D

Score

N/A

Malware Config

Signatures

Files

f3574eabe2e3474cc3a3dc45b98575ecefcb9ebf772140048c6437076fbb010a
.exe windows x86

c84f153fd9e01a3d4ce32d046a387f10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStdHandle
Sleep
GetProcessHeap
DeleteFileA
GetModuleHandleA
VirtualQueryEx
CancelIo
WriteConsoleW
GetCommandLineA
lstrcpyA
GetStartupInfoA
HeapDestroy
GetFileAttributesA
VirtualProtect
GetDriveTypeW
CopyFileA
SetEvent
WriteConsoleW
lstrlenW
GetPrivateProfileSectionW
WriteConsoleW

mmcndmgr

DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer

cryptui

DllRegisterServer
LocalEnroll
LocalEnrollNoDS
CryptUIWizExport
CryptUIWizDigitalSign
CryptUIWizImport
CryptUIDlgViewContext
CryptUIStartCertMgr
CryptUIWizBuildCTL
LocalEnroll
WizardFree
WizardFree
DllUnregisterServer

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impexp
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c84f153fd9e01a3d4ce32d046a387f10

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 1KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 16KB

.rdata Size: 512B - Virtual size: 296B

.rsrc Size: 284KB - Virtual size: 284KB

.rdata Size: 512B - Virtual size: 257B

.impexp Size: 512B - Virtual size: 112B

.text
Size: 1KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 16KB

.rdata
Size: 512B - Virtual size: 296B

.rsrc
Size: 284KB - Virtual size: 284KB

.rdata
Size: 512B - Virtual size: 257B

.impexp
Size: 512B - Virtual size: 112B